Cyber Threat Intelligence Analyst

American Electric Power; Columbus (OH); On-site; USD 116,000 - 151,000; Full time

Benefits offered by this job

Annual bonus

401(k) match

Pension plan

Comprehensive benefits

Job summary

American Electric Power is seeking a Cyber Threat Intelligence Analyst to identify, analyze, and communicate cyber threats affecting the organization. You will collect intelligence from internal and external sources, track threat actors and campaigns, and develop actionable intelligence for security operations and executive audiences.

The role requires strong analytical skills, knowledge of TTPs and CTI frameworks, and collaboration with Security Operations, Incident Response, Threat Hunting,

Qualifications

• Bachelor's degree or equivalent with cyber/IT focus.
• 3+ years in cyber threat intelligence or related fields.
• Experience with threat actor behavior, malware campaigns, and threats.
• Familiarity with MITRE ATT&CK and NIST/NICE frameworks.
• Experience with SIEM/EDR and threat intel sources.
• Strong written and verbal communication; ability to present to technical/executive audiences.

Responsibilities

• Collect, analyze, and disseminate strategic, operational, and tactical CTI.
• Monitor global threat activity, actors, campaigns, vulnerabilities, and trends.
• Research adversary TTPs using MITRE ATT&CK and related frameworks.
• Produce intelligence reports, briefings, and executive summaries.
• Develop intelligence requirements aligned to risk and priorities.
• Analyze security logs and network traffic to identify threats for detection and response.
• Support threat hunting, incident response, detection engineering, and vulnerability management.
• Collaborate with government agencies and industry partners.
• Track metrics and measure intelligence product effectiveness.
• Inform executive decision-making with timely threat reporting.

Skills

Threat intelligence

MITRE ATT&CK

SIEM

EDR tools

Threat hunting

Analytical thinking

Communication

Risk analysis

Education

Bachelor's degree or Associate with 2+ years

Related field (Cybersecurity/IT/CS/Intelligence)

HS diploma + 4 years IT experience

Tools

Threat intelligence platforms

Security monitoring platforms

Open-source intelligence

Network logs analysis

Job description

Job Posting End Date

10-26-2026

Please note the job posting will close on the day before the posting end date.

Job Summary

We are seeking a highly motivated Cyber Threat Intelligence (CTI) Analyst to identify, analyze, and communicate cyber threats that may impact the organization. This role is responsible for collecting and assessing intelligence from internal and external sources, tracking threat actors and campaigns, developing actionable intelligence products, and supporting cybersecurity operations through proactive threat identification and risk analysis.

The ideal candidate combines strong analytical skills with a deep understanding of adversary tactics, techniques, and procedures (TTPs), cyber threat intelligence frameworks, and security operations. This individual will work closely with Security Operations, Incident Response, Threat Hunting, Detection Engineering, and business stakeholders to improve the organization's ability to anticipate, detect, and respond to emerging threats.

Job Description

What you’ll do:

Key Responsibilities

Essential Job Functions & Tasks

• Collect, analyze, and disseminate strategic, operational, and tactical cyber threat intelligence.
• Monitor global cyber threat activity, threat actor developments, malware campaigns, vulnerabilities, and emerging attack trends.
• Research and analyze adversary TTPs using frameworks such as MITRE ATT&CK.
• Produce intelligence reports, threat assessments, executive summaries, and briefing materials for technical and non-technical audiences.
• Develop and maintain intelligence requirements aligned to organizational risk and business priorities.
• Perform analysis of security logs, network traffic, and threat intelligence sources to identify threats targeting enterprise and operational technology environments, validating IOCs and providing actionable intelligence to support detection, hunting, and incident response activities.
• Support threat hunting, incident response, detection engineering, and vulnerability management activities through intelligence-driven analysis.
• Investigate potential threats affecting enterprise, cloud, identity, third-party, and operational technology environments.
• Collaborate with government agencies, industry partners, information-sharing organizations, and cybersecurity communities.
• Maintain awareness of geopolitical events and assess their potential impact on cyber risk.
• Track intelligence metrics and measure the effectiveness of intelligence products and recommendations.
• Support executive decision-making through timely and actionable threat reporting.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, Criminal Justice, or a related field; or equivalent combination of education and experience.
• Three or more years of experience in cyber threat intelligence, security operations, incident response, threat hunting, detection engineering, vulnerability management, or cyber defense.
• Experience analyzing threat actor behavior, malware activity, intrusion campaigns, and emerging cyber threats.
• Understanding of intelligence analysis methodologies and cyber threat intelligence lifecycle processes.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, NIST Cybersecurity Framework, and related industry frameworks.
• Experience working with threat intelligence platforms, SIEM solutions, EDR tools, security monitoring platforms, and open-source intelligence sources.
• Strong written and verbal communication skills with the ability to clearly present findings to technical and executive audiences.
• Demonstrated critical thinking, attention to detail, and ability to assess incomplete or conflicting information

Preferred Qualifications

• Experience supporting critical infrastructure, energy, utility, industrial control system (ICS), or operational technology (OT) environments.
• Experience integrating threat intelligence into threat hunting, incident response, or detection programs.
• Knowledge of nation-state threats, ransomware groups, cybercriminal ecosystems, and emerging adversary trends.
• Experience developing intelligence requirements, collection plans, and analytic products.
• Familiarity with scripting or automation using Python, PowerShell, or similar languages.
• Experience briefing senior leadership and executive stakeholders.
• Active security clearance or eligibility to obtain one is a plus.

Preferred Certifications

• GIAC Cyber Threat Intelligence (GCTI)
• Certified Cyber Threat Intelligence Analyst (CCTIA)
• GIAC Certified Incident Handler (GCIH)GIAC Certified Forensic Analyst (GCFA)
• CompTIA Security+
• CISSP
• Certified Threat Intelligence Analyst (CTIA)
• SANS FOR578 or SEC487 related coursework

Success in This Role

Successful candidates will demonstrate the ability to transform raw data into actionable intelligence, communicate cyber risk effectively, and enable proactive defense against evolving threats. They will serve as a trusted intelligence partner to security operations, threat hunting, incident response, and executive leadership teams.

What We're Looking For:

Education requirements are listed below:

• Bachelor's degree or associate degree with 2 years relevant experience in system administration/help desk/security (cyber or physical) OR High School Diploma/GED with 4 years relevant experience in IT system administration/help desk/security (cyber or physical).

Work Experience requirement listed below:

• 7 or more years of Information Technology related experience; OR 5 or more years of security related experience, which may include military/government work experience in addition to any experience identified above.

What You'll Get

• Base salary
• Annual bonus
• Long-term incentive
• 401(k) match
• AEP Pension
• Comprehensive benefits package designed to support and enhance the overall well-being of employees.

At AEP, we’re more than just an energy company — we’re a team of dedicated professionals committed to delivering safe, reliable, and innovative energy solutions. Guided by our mission to put the customer first, we strive to exceed expectations by listening, responding, and continuously improving the way we serve our communities. If you're passionate about making a meaningful impact and being part of a forward-thinking organization, this is the company for you!

Compensation Data

Compensation Grade

SP20-009

Compensation Range

$116,255.00 - $151,132.50

The Physical Demand Level for this job is: S – Sedentary Work: Exerting up to 10 pounds of force occasionally (Occasionally: activity or condition exists up to 1/3 of the time) and/or a negligible amount of force frequently. (Frequently: activity or condition exists from 1/3 to 2/3 of the time) to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time but may involve walking or standing for brief periods of time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

It is hereby reaffirmed that it is the policy of American Electric Power (AEP) to provide Equal Employment Opportunity in all respects of the employer-employee relationship including recruiting, hiring, upgrading and promotion, conditions and privileges of employment, company sponsored training programs, educational assistance, social and recreational programs, compensation, benefits, transfers, discipline, layoffs and termination of employment to all employees and applicants without discrimination because of race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, veteran or military status, disability, genetic information, or any other basis prohibited by applicable law. When required by law, we might record certain information or applicants for employment may be invited to voluntarily disclose protected characteristics.