Cyber Threat Intelligence Analyst

aep; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

AEP is seeking a Cyber Threat Intelligence Analyst in Columbus to identify, analyze, and communicate cyber threats affecting the organization. You will collect intelligence from internal and external sources, track threat actors and campaigns, and produce actionable intelligence for cybersecurity operations.

Responsibilities include monitoring threat activity, researching adversary TTPs, and delivering reports and briefings for technical and executive audiences.

Qualifications

• Bachelor's degree or higher in Cybersecurity, IT, CS, Intelligence Studies, Criminal Justice, or related field.
• Three or more years of experience in cyber threat intelligence, security operations, incident response, threat hunting, detection engineering, vulnerability management, or cyber defense.
• Experience analyzing threat actor behavior, malware activity, intrusion campaigns, and emerging cyber threats.

Responsibilities

• Collect, analyze, and disseminate strategic, operational, and tactical cyber threat intelligence.
• Monitor global cyber threat activity, threat actor developments, malware campaigns, vulnerabilities, and emerging attack trends.
• Research and analyze adversary TTPs using frameworks such as MITRE ATT&CK.
• Produce intelligence reports, threat assessments, executive summaries, and briefing materials for technical and non-technical audiences.
• Develop and maintain intelligence requirements aligned to organizational risk and business priorities.
• Perform analysis of security logs, network traffic, and threat intelligence sources to identify threats targeting enterprise and operational technology environments, validating IOCs and providing actionable intelligence to support detection, hunting, and incident response activities.
• Support threat hunting, incident response, detection engineering, and vulnerability management activities through intelligence-driven analysis.
• Investigate potential threats affecting enterprise, cloud, identity, third-party, and operational technology environments.
• Collaborate with government agencies, industry partners, information-sharing organizations, and cybersecurity communities.
• Maintain awareness of geopolitical events and assess their potential impact on cyber risk.
• Track intelligence metrics and measure the effectiveness of intelligence products and recommendations.
• Support executive decision-making through timely and actionable threat reporting.

Skills

Communication skills

Critical thinking

Attention to detail

Analytical reasoning

Education

Bachelor's degree or higher in Cybersecurity, IT, CS, Intelligence Studies, Criminal Justice, or related field

Tools

Threat intelligence platforms

SIEM

EDR tools

Security monitoring platforms

Open-source intelligence sources

Job description

Job Posting End Date10-26-2026 Please note the job posting will close on the day before the posting end date.

Job Summary

We are seeking a highly motivated Cyber Threat Intelligence (CTI) Analyst to identify, analyze, and communicate cyber threats that may impact the organization. This role is responsible for collecting and assessing intelligence from internal and external sources, tracking threat actors and campaigns, developing actionable intelligence products, and supporting cybersecurity operations through proactive threat identification and risk analysis.

What you'll do:

Essential Job Functions & Tasks

Key Responsibilities

• Collect, analyze, and disseminate strategic, operational, and tactical cyber threat intelligence.
• Monitor global cyber threat activity, threat actor developments, malware campaigns, vulnerabilities, and emerging attack trends.
• Research and analyze adversary TTPs using frameworks such as MITRE ATT&CK.
• Produce intelligence reports, threat assessments, executive summaries, and briefing materials for technical and non-technical audiences.
• Develop and maintain intelligence requirements aligned to organizational risk and business priorities.
• Perform analysis of security logs, network traffic, and threat intelligence sources to identify threats targeting enterprise and operational technology environments, validating IOCs and providing actionable intelligence to support detection, hunting, and incident response activities.
• Support threat hunting, incident response, detection engineering, and vulnerability management activities through intelligence-driven analysis.
• Investigate potential threats affecting enterprise, cloud, identity, third-party, and operational technology environments.
• Collaborate with government agencies, industry partners, information-sharing organizations, and cybersecurity communities.
• Maintain awareness of geopolitical events and assess their potential impact on cyber risk.
• Track intelligence metrics and measure the effectiveness of intelligence products and recommendations.
• Support executive decision-making through timely and actionable threat reporting.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, Criminal Justice, or a related field; or equivalent combination of education and experience.
• Three or more years of experience in cyber threat intelligence, security operations, incident response, threat hunting, detection engineering, vulnerability management, or cyber defense.
• Experience analyzing threat actor behavior, malware activity, intrusion campaigns, and emerging cyber threats.
• Understanding of intelligence analysis methodologies and cyber threat intelligence lifecycle processes.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, NIST Cybersecurity Framework, and related industry frameworks.
• Experience working with threat intelligence platforms, SIEM solutions, EDR tools, security monitoring platforms, and open-source intelligence sources.
• Strong written and verbal communication skills with the ability to clearly present findings to technical and executive audiences.
• Demonstrated critical thinking, attention to detail, and ability to assess incomplete or conflicting information

Preferred Qualifications

• Experience supporting critical infrastructure, energy, utility, industrial control system (ICS), or operational technology (OT) environments.
• Experience integrating threat intelligence into threat hunting, incident response, or detection programs.
• Knowledge of nation‑state threats, ransomware groups, cybercriminal ecosystems, and emerging adversary trends.
• Experience developing intelligence requirements, collection plans, and analytic products.
• Familiarity with scripting or automation using Python, PowerShell, or similar languages.
• Experience briefing senior leadership and executive stakeholders.
• Active security clearance or eligibility to obtain one is a plus.

Preferred Certifications

• GIAC Cyber Threat Intelligence (GCTI)
• Certified Cyber Threat Intelligence Analyst (CCTIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• CompTIA Security+
• CISSP
• Certified Threat Intelligence Analyst (CTIA)
• SANS FOR578 or SEC487 related coursework

Success in This Role

Successful candidates will demonstrate the ability to transform raw data into actionable intelligence, communicate cyber risk effectively, and enable proactive defense against evolving threats. They will serve as a trusted intelligence partner to security operat