Cybersecurity Intelligence Senior Associate — Applied Cyber Threat Research (ACTR)

Cybersecurity Jobs; Tampa (FL); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health insurance

On-site health and wellness centers

Retirement savings plan

Tuition reimbursement

Mental health support

Financial coaching

Job summary

JPMorgan Chase’s Applied Cyber Threat Research (ACTR) team in Tampa, FL onsite is seeking a senior cyber intelligence analyst to fuse threat reporting, OSINT, and telemetry into coherent narratives and to map adversary techniques to MITRE ATT&CK with AI-assisted automation.

You will develop finished intelligence assessments for tactical, operational, and strategic contexts and support red/purple team initiatives.

Qualifications

• 4+ years of experience in cyber intelligence, threat assessment, or security research.
• Ability to operationalize MITRE ATT&CK by mapping adversary TTPs into attack flows and controls.
• Strong OSINT skills across surface, deep, and dark web and social media.

Responsibilities

• Perform all-source analysis by combining threat reporting, OSINT, telemetry, incident data, and vendor intelligence into a coherent, corroborated intelligence narrative.
• Build attack flows using the MITRE ATT&CK framework, mapping adversary TTPs to security controls and attack surface while prioritizing gaps.
• Create finished intelligence assessments for tactical, operational, and strategic stakeholders across technologies and business contexts.
• Conduct open-source collection across surface, deep, and dark web and social media, then review and validate information for reliability.
• Monitor global cyber threats and support Threat Hunting, Red Team, and Purple Team efforts.
• Design and improve tools and automations with AI-assisted approaches to accelerate collection and triage workflows.

Skills

All-source analysis

MITRE ATT&CK

OSINT

VS Code

AI-assisted coding tools

Python

Bash

PowerShell

GitHub Copilot

Claude Code

Tools

VS Code

Claude Code

GitHub Copilot

Job description

Join JPMorgan Chase’s Applied Cyber Threat Research (ACTR) team in Tampa, FL (onsite) and help produce finished cyber threat intelligence that connects real adversary behavior to practical defense decisions. This role focuses on fusing multiple intelligence sources, mapping activity to MITRE ATT&CK, and scaling repeatable research workflows using AI-assisted and automation approaches.

What you’ll do

• Perform all-source analysis by combining threat reporting, OSINT, technical telemetry, incident data, and vendor intelligence into a coherent, corroborated intelligence narrative.
• Build attack flows using the MITRE ATT&CK framework, mapping adversary TTPs to security controls and attack surface while highlighting control gaps and priorities based on the current threat landscape.
• Create finished intelligence assessments for stakeholders at tactical, operational, and strategic levels, including findings that span specific technologies and applications and new business contexts such as mergers and acquisitions targets and unfamiliar industries.
• Conduct open-source collection across the surface, deep, and dark web as well as social media, then review, corroborate, and validate information for reliability and analytic value before it is used.
• Proactively monitor and analyze global cyber threats, and support broader cyber operations objectives such as Threat Hunting, Red Team, and Purple Team efforts.
• Design and improve tools and automations with reuse-first and AI-assisted approaches to accelerate intelligence collection and triage workflows.
• Use enterprise-authorized AI capabilities to speed up threat research synthesis and threat assessment, with evidence-based grounding and validation prior to use.

What you’ll need

• 4+ years of experience in cyber intelligence, threat assessment, or security research, with a focus on cyber threat research and analysis.
• Ability to operationalize MITRE ATT&CK by converting adversary TTPs into attack flows, mapping techniques to controls and attack surface, and framing gaps and priorities against today’s threats.
• Strong OSINT skills, including collection across surface, deep, and dark web and social media, plus the ability to review, corroborate, and validate data for reliability and analytic value.
• Practical experience with modern integrated development environments (for example, VS Code) and AI-assisted or agentic coding tools (for example, Claude Code, GitHub Copilot) to prototype, build, and test tools and automations, alongside the judgment to validate and review AI-generated outputs.

Technologies you may work with

• MITRE ATT&CK, OSINT
• VS Code, Claude Code, GitHub Copilot
• Python, Bash, JavaScript, PowerShell

Benefits

• Base salary determined based on the role, experience, skill set, and location.
• Eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid as cash and/or forfeitable equity.
• Comprehensive health care coverage.
• On-site health and wellness centers.
• A retirement savings plan.
• Backup childcare.
• Tuition reimbursement.
• Mental health support.
• Financial coaching.

Preferred qualifications, capabilities, and skills

• Proficiency in scripting languages (Python, Bash, JavaScript, PowerShell) with experience automating threat detection, analysis, and response.
• Experience within the Intelligence Community, Defense Intelligence Enterprise, or broader Military Intelligence community, including U.S. Government agencies and interagency partners (for example, DHS, DoD, DOJ, and other federal/interagency organizations).
• Understanding of and ability to action the intelligence lifecycle.
• Experience with SIEM/EDR tools, log analysis, and network traffic analysis to detect and investigate malicious or anomalous activity.

About the team

JPMorgan Chase professionals in Corporate Functions cover a range of areas including finance and risk, human resources, and marketing. Corporate teams help ensure businesses, clients, customers, and employees are set up for success.