Remote Threat Intelligence Analyst - Hunt & Respond

Hornetsecurity; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

International exchange program

Health and life insurance

Flexible remote working policy

Sports and wellness benefits

Meal vouchers €10 per day

Public transportation reimbursement

Job summary

Hornetsecurity is seeking a Threat Intelligence Analyst to investigate threats detected for customers, gathering TTPs, IoCs, and tools, and to develop action plans for incident response.

You will analyze email campaigns, uncover attack patterns, and share findings with international stakeholders, delivering briefings in English and collaborating with cross‑functional teams. This role offers remote flexibility and multinational exposure within a leading cybersecurity company.

Qualifications

• Understanding cybersecurity fundamentals: CIA, vulnerabilities, NIST/ISO MITRE ATT&CK.
• Experience with threat hunting and log analysis tools.
• Ability to analyze large datasets and identify patterns.

Responsibilities

• Monitor and analyze data from threat intel sources to identify cyber threats and collect TTPs/IoCs.
• Analyze threats targeting customers, including malware, phishing, and APTs.
• Identify trends and provide predictive insights to anticipate attacks.
• Prepare detailed reports and briefings for technical and non-technical stakeholders.
• Deliver briefings in English and support international visibility.
• Represent the lab in customer or partner presentations.
• Contribute to threat intelligence briefings, webinars, and demos.
• Share outputs with international stakeholders and coordinate responses.
• Collaborate with other teams to share intelligence and coordinate actions.

Skills

Threat hunting

Data analysis

Communication

English proficiency

Python scripting

Network protocol analysis

Tools

Splunk

ClickHouse

OpenCTI

MISP

ThreatConnect

Job description

Hornetsecurity is seeking a Threat Intelligence Analyst to investigate threats detected for customers, gathering TTPs, IoCs, and tools, and to develop action plans for incident response.

You will analyze email campaigns, uncover attack patterns, and share findings with international stakeholders, delivering briefings in English and collaborating with cross‑functional teams. This role offers remote flexibility and multinational exposure within a leading cybersecurity company.