Cyber Threat Intelligence Analyst – Remote Work Eligible

Cityofnewyork; New York (NY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

The City of New York is seeking a Cyber Technical Intelligence Analyst to join the DOB cyber program in New York, NY. The role focuses on intel support, threat hunting, and incident response across the IT environment, using telemetry from endpoints, networks, and cloud services to identify and mitigate threats.

Responsibilities include collecting and analyzing indicators of compromise, developing threat communications, and supporting remediation in the Security Operations Center.

Qualifications

• Bachelor's degree or equivalent plus 4 years of related experience
• Experience in cyber intel, threat analysis, and incident response
• Familiarity with network, endpoint, and cloud security
• Ability to create threat intelligence reports and briefings

Responsibilities

• Provide intel support and assist investigative efforts
• Augment detection capabilities through hunt missions
• Analyze IOC(S) and produce finished reports
• Develop threat and risk communication processes
• Perform network, system, and kill chain analyses of malware
• Research campaigns, actors, and code families through data analysis
• Use predictive analytics to assess adversary capabilities and intent
• Characterize network traffic and identify anomalous activity
• Support SOC remediation requests and incident response
• Create and present threat briefings for tactical awareness
• Handle special projects as assigned

Skills

Threat intelligence

Incident response

Threat hunting

Security monitoring

Education

Baccalaureate degree or equivalent

Tools

PowerShell

Python

Power Automate

Microsoft Graph API

IDS/IPS

Job description

The City of New York is seeking a Cyber Technical Intelligence Analyst to join the DOB cyber program in New York, NY. The role focuses on intel support, threat hunting, and incident response across the IT environment, using telemetry from endpoints, networks, and cloud services to identify and mitigate threats.

Responsibilities include collecting and analyzing indicators of compromise, developing threat communications, and supporting remediation in the Security Operations Center.