Cyber Threat Intelligence Analyst

Toyota Tsusho Systems US, Inc.; Plano (TX); On-site; USD 90,000 - 150,000; Full time

Job summary

Toyota Tsusho Systems US, Inc. is seeking a CTI Analyst to strengthen our ability to identify, understand, and respond to cyber threats.

This individual-contributor role combines hands-on cyber threat intelligence operations, malware and TTP research, and the development of operational tooling. You will work with the CTI team to deliver actionable intelligence that supports hunting, detection, incident response, and defensive decisions, while maintaining high technical rigor and clear

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience.
• 3–5 years hands-on cyber threat intelligence, including operational intelligence support and technical threat research.
• Strong malware analysis skills, including static and behavioral analysis, and ability to explain attacker techniques and defensive implications.
• Experience researching threat actors, campaigns, infrastructure; validating sources; and distinguishing observed facts from analytic assessments.
• Ability to translate research into actionable intelligence, ATT&CK mappings, hunting queries, detection recommendations, and defensive guidance.
• Proficiency in scripting or programming to develop and maintain tools and automation for intelligence operations and research.
• Experience supporting incident response and threat hunting through timely, relevant intelligence.
• Strong documentation and communication skills, with the ability to present technical findings to varied stakeholders.
• Ability to manage assigned work independently, communicate status and blockers, and share recurring operational responsibilities within a team.

Responsibilities

• Participate in CTI operational coverage model alongside other CTI team members.
• Support recurring intelligence monitoring, alert review, RFIs, advisories, incident-response requests, active hunts, and other operational CTI needs.
• Document operational findings and translate them into useful intelligence, hunting, detection, or defensive actions.
• Research malware, threat actors, campaigns, infrastructure, attack techniques, and emerging threats relevant to the org.
• Produce actionable research reports, advisories, threat profiles, indicators, MITRE ATT&CK mappings, hunting hypotheses, queries, detection recommendations, and defensive guidance.
• Prioritize research that addresses real-world threats, observed activity, operational gaps, or agreed strategic priorities.
• Present significant findings to the team and relevant stakeholders in a clear and usable form.
• Maintain a high standard of technical rigor, source validation, analytic accuracy, and documentation.
• Develop, improve, and maintain tools and automation that directly support CTI operations and malware or TTP research.
• Prioritize engineering work that closes operational or research gaps and improves analytic quality, efficiency, or resilience.
• Validate and document tools and workflows so other CTI team members can use, maintain, and support them.

Skills

CTI operations

Malware analysis

Scripting/Automation

Documentation

Communication

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Threat intelligence platforms

Job description

Founded in 2011, Toyota Tsusho Systems US, Inc. (TTS-US) is a Toyota group company, that develops IT solutions wherever global businesses operate. Transforming into a technology and mobility company, TTS-US with it's 8 TTS affiliates worldwide is establishing a secure and resilient Toyota global value chain. The creative capacity to forge such limitless business opportunities is one of the strengths of Toyota Tsusho Systems.

Summary

We are seeking a CTI Analyst to strengthen our ability to identify, understand, and respond to cyber threats. This individual-contributor role combines hands-on cyber threat intelligence (CTI) operations, deep malware, and tactics, techniques, and procedures (TTP) research. You will work alongside CTI team members to deliver reliable operational coverage and actionable intelligence that supports hunting, detection, incident response, and defensive decisions.

What You'll Be Doing

CTI Operations

• Participate in CTI operational coverage model alongside other CTI team members
• Support recurring intelligence monitoring, alert review, requests for information (RFIs), advisories, incident-response requests, active hunts, and other operational CTI needs
• Document operational findings and translate them into useful intelligence, hunting, detection, or defensive actions

Malware and TTP Research

• Research malware, threat actors, campaigns, infrastructure, attack techniques, and emerging threats relevant to the org
• Produce actionable research reports, advisories, threat profiles, indicators, MITRE ATT&CK mappings, hunting hypotheses, queries, detection recommendations, and defensive guidance
• Prioritize research that addresses real-world threats, observed activity, operational gaps, or agreed strategic priorities
• Present significant findings to the team and relevant stakeholders in a clear and usable form
• Maintain a high standard of technical rigor, source validation, analytic accuracy, and documentation

Engineering and Tooling

• Develop, improve, and maintain tools and automation that directly support CTI operations and malware or TTP research
• Prioritize engineering work that closes operational or research gaps and improves analytic quality, efficiency, or resilience
• Validate and document tools and workflows so other CTI team members can use, maintain, and support them

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience
• Minimum of 3-5 years of hands-on experience in cyber threat intelligence, including operational intelligence support and technical threat research
• Strong malware analysis skills, including static and behavioral analysis, and the ability to explain attacker techniques and their defensive implications
• Experience researching threat actors, campaigns, and infrastructure; validating sources; and distinguishing observed facts from analytic assessments
• Ability to translate research into actionable intelligence, ATT&CK mappings, hunting queries, detection recommendations, and defensive guidance
• Proficiency in scripting or programming to develop and maintain tools and automation for intelligence operations and research
• Experience supporting incident response and threat hunting through timely, relevant intelligence
• Strong documentation and communication skills, with the ability to present technical findings to varied stakeholders
• Ability to manage assigned work independently, communicate status and blockers, and share recurring operational responsibilities within a team

Preferred Or Bonus Skills

• Experience supporting CTI in large enterprise, automotive, or manufacturing environments
• Experience with malware reverse engineering, threat infrastructure analysis, or detection engineering
• Familiarity with threat intelligence platforms, security data sources, APIs, and automation workflows
• Experience improving shared research methods, operational procedures, and tool maintainability

Why Join Us

• Help strengthen defenses through intelligence and research that inform practical security actions
• Combine hands-on CTI operations and deep technical research in an individual-contributor role
• Collaborate with experienced peers, share findings, and improve the team's collective capabilities