Cyber Threat Intelligence (CTI) Analyst

Employers from Greece; United States; Remote; USD 56,000 - 101,000; Full time

Job summary

AI2CYBER is seeking a Senior / Expert Cyber Threat Intelligence Analyst based in Greece to join the Threat Intelligence team. You will analyze adversary behavior, map activity to MITRE ATT&CK, and produce actionable intelligence for detection engineering, IR, and strategic security decisions.

The role requires deep familiarity with adversary tradecraft, correlating multi-source intel, and collaborating with SOC and leadership to drive risk decisions.

Qualifications

• Strong understanding of adversary TTPs, kill chain & MITRE ATT&CK framework.
• Experience with Threat Intelligence Platforms (TIPs) and malware analysis reports.

Responsibilities

• Strategic & Tactical Intelligence: analyze threat actor activity, campaigns, malware families, and TTP evolution.
• Technical Analysis: extract and correlate IOCs, map techniques to MITRE ATT&CK, review PCAPs and logs.
• Intelligence Engineering & Automation: work with STIX/TAXII feeds, automate ingestion and correlation pipelines.
• Cross-Team Collaboration: support SOC during investigations, provide adversary insights during IR, present findings to stakeholders.

Skills

Adversary TTPs

MITRE ATT&CK

IOC lifecycle

Tools

Threat Intelligence Platforms (TIPs)

Malware analysis reports

Job description

at AI2CYBER

Level:Senior / Expert

We are seeking a highly skilled Cyber Threat Intelligence (CTI) Analyst based in Greece to join our Threat Intelligence team.
The ideal candidate is technically strong, analytically rigorous, and deeply familiar with adversary tradecraft. This role goes beyond monitoring feeds. You will analyze adversary behavior, correlate multi-source intelligence, map activity to MITRE ATT&CK, and produce actionable intelligence that drives detection engineering, incident response, and strategic security decisions. You will operate at the intersection of intelligence analysis, detection engineering, and adversary emulation.

Responsibilities

• Strategic & Tactical Intelligence
  • Analyze threat actor activity, campaigns, malware families, and TTP evolution.
  • Produce actionable intelligence reports for SOC, IR, and leadership.
  • Conduct threat landscape assessments and sector-specific risk analysis.
  • Track and profile APT groups, financially motivated actors, and emerging threats.
• Technical Analysis
  • Extract and correlate IOCs (domains, IPs, hashes, infrastructure patterns).
  • Map adversary techniques toMITRE ATT&CK.
  • Analyze malware behavior reports and sandbox outputs.
  • Review PCAPs, logs, and telemetry to identify patterns and anomalies.
  • Support detection rule development (Sigma, YARA, Splunk, EDR queries).
• Intelligence Engineering & Automation
  • Work with STIX/TAXII feeds and threat intelligence platforms.
  • Assist in automation of ingestion, normalization, and correlation pipelines.
  • Contribute to intelligence scoring models (risk scoring, actor confidence, exploit maturity).
  • Validate intelligence through internal telemetry and honeypot data (if applicable).
• Cross-Team Collaboration
  • Support SOC during active investigations.
  • Provide adversary insights during incident response.
  • Contribute to purple-team exercises and threat emulation scenarios.
  • Present findings to technical and executive stakeholders.

Required Technical Skills

• Strong understanding of:
  • Adversary TTPs
  • Kill Chain & MITRE ATT&CK framework
  • IOC lifecycle & enrichment techniques
• Experience with:
  • Threat Intelligence Platforms (TIPs)
  • Malware analysis reports