Associate, Threat Intelligence

Kroll; Northern (KY); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Kroll Cyber Threat Intelligence (CTI) is seeking a skilled Cyber Threat Intelligence Analyst who can identify and translate cyber threat intelligence into actionable insights for clients globally. The role supports domestic and international engagements with strong analytical and collaborative skills.

Responsibilities include collecting intelligence from open, deep, and dark web sources; supporting incident response; and delivering concise reports and briefings to both technical and

Qualifications

• 1–3+ years in cyber threat intelligence or related security roles.
• Experience analyzing threats across open, deep, and dark web.
• Strong written and verbal English communication.

Responsibilities

• Identify, collect, and analyze cyber threat intelligence from open, deep web, and dark web sources.
• Support incident response with threat research, indicator enrichment, and rapid investigative analysis.
• Produce clear, concise, and actionable intelligence reports and briefings for technical and non‑technical stakeholders.
• Collaborate with CTI peers and engagement leads to ensure successful client outcomes.
• Track workstreams and meet engagement delivery timelines.

Skills

Threat intelligence

Analytical thinking

English communication

Independent worker

Tools

OSINT tools

Job description

Kroll Cyber Threat Intelligence (CTI) is seeking a skilled and motivated Cyber Threat Intelligence Analyst who is passionate about identifying, analyzing, and translating cyber threat intelligence into actionable insights for global business clients. This role supports domestic and international engagements and requires strong analytical skills, collaboration across regions, and a client‑focused mindset.

Key Responsibilities

• Identify, collect, and analyze cyber threat intelligence from open web, deep web, and dark web sources.
• Conduct exploratory and targeted investigations related to cyber threats, data leaks, fraud, brand abuse, and threat actor activity.
• Provide direct support to incident response efforts through threat research, indicator enrichment, and rapid investigative analysis.
• Assist with incident detection, vulnerability assessments, and digital footprint monitoring to identify emerging risks and exposures.
• Produce clear, concise, and actionable intelligence reports and briefings for both technical and non‑technical stakeholders.
• Participate in client communications, including status updates, investigative briefings, and clarification of findings under guidance from engagement leads.
• Support project and task management responsibilities by tracking assigned workstreams, meeting delivery timelines, and ensuring alignment with engagement expectations.
• Manage multiple concurrent tasks while meeting quality, responsiveness, and utilization expectations in a consulting model.
• Collaborate closely with CTI peers, incident responders, and engagement leads to ensure successful client outcomes.

Required Experience & Qualifications

• 1–3+ years of experience in cyber threat intelligence, security research, SOC, or cyber investigations.
• Demonstrated experience analyzing threats across the open web, deep web, and dark web.
• Prior exposure to incident response support, security operations, or threat detection activities.
• Working knowledge of vulnerability assessments, exposure management, and digital footprint monitoring.
• Strong analytical, investigative, and critical‑thinking skills.
• Excellent written and verbal English communication skills.
• Ability to work independently and as part of a distributed, global team.

Preferred Qualifications

• Experience working in consulting, intelligence, MDR, or managed security services environment.
• Familiarity with OSINT, CTI, and investigative tools (e.g., dark web forums, marketplaces, breach data sources).
• Understanding of cybercrime ecosystems, threat actor TTPs, ransomware, fraud, or data‑theft operations.
• Relevant certifications (e.g., CEH, Security+, GCIA, GCTI, OSCP) are a plus.
• Willingness to support global clients, which may occasionally require flexible working hours overlapping with US or EMEA time zones.
• Strong sense of ownership, professionalism, and commitment to client satisfaction.
• Continuous learning mindset in a fast‑evolving threat landscape.

Why Kroll

• Exposure to global, high‑impact cyber investigations.
• Opportunity to work with experienced CTI and incident response professionals.
• Strong emphasis on collaboration, learning, and professional growth.
• Healthcare Coverage: Comprehensive medical, dental, and vision plans.
• Time Off and Leave Policies: Generous paid time off (PTO), paid company holidays, generous parental and family leave.
• Protective Insurances: Life insurance, short- and long-term disability coverage, and accident protection.
• Compensation and Rewards: Competitive salary structures, performance‑based incentives, and merit‑based compensation reviews.
• Retirement Plans: 401(k) plans with company matching.

Please note that benefits may vary by region, department and role. We encourage you to speak with your recruiter to learn more about the specific benefits available for your position.

About Kroll

Join the global leader in risk and financial advisory solutions—Kroll. With a nearly century‑long legacy, we blend trusted expertise with cutting‑edge technology to navigate and redefine industry complexities. As a part of One Team, One Kroll, you'll contribute to a collaborative and empowering environment, propelling your career to new heights. Ready to build, protect, restore and maximize our clients’ value? Your journey begins with Kroll.

We are proud to be an equal opportunity employer and will consider all qualified applicants regardless of gender, gender identity, race, religion, color, nationality, ethnic origin, sexual orientation, marital status, veteran status, age or disability.