Senior Cyber Incident Response & Threat Intel Analyst

S&P Global; Boulder (CO); On-site; USD 100,000 - 170,000; Full time

Benefits offered by this job

Health & Wellness

Flexible Downtime

Continuous Learning

Investment in Your Future

Family Friendly Perks

Job summary

S&P Global is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze, and respond to security incidents, enrich investigations with timely intelligence, and drive proactive defences on a global scale.

Based in the UK but providing global coverage, you will partner with Security Operations and Threat Intelligence, build and refine playbooks, and deliver intel-informed insights to leadership while advancing detection capabilities across endpoints,

Qualifications

• Understanding of attacker tactics and procedures (TTPs) and ability to map activity to MITRE ATT&CK.
• Experience handling security events in critical environments and applying intelligence to accelerate triage and response.
• Ability to analyze logs from systems, applications, and cloud/SaaS to investigate issues and enrich detections.
• Hands‑on experience with a SIEM (Splunk preferred) for investigations, alerting, reporting, and threat hunting.
• Ability to produce clear, actionable intel and incident reports for leadership and technical teams.
• Familiarity with threat intel workflows: collection planning, source evaluation, PIRs, TLP, and feedback loops.

Responsibilities

• Coordinate and triage response to cybersecurity events and conduct forensic analysis across endpoints, networks, cloud, and SaaS.
• Integrate threat intelligence into investigations (enrich IOCs, map activity to MITRE ATT&CK, identify threat actors/TTPs).
• Develop and maintain Incident Response playbooks, SOPs, PIRs, and collection plans to refine detections.
• Collaborate with SOC to investigate incidents, deliver containment, remediation, and root cause analysis; produce intel-informed reports.
• Create and tune detections (SIEM/SOAR, EDR) using intelligence signals and Sigma/YARA where applicable.
• Produce consumable intelligence outputs (flash alerts, threat overviews, executive briefs) for diverse audiences.

Skills

MITRE ATT&CK mapping

Threat intel workflows

SIEM analysis

Threat hunting

Incident response

Executive/technical communication

Cloud/log analysis

Tools

Splunk

MISP

OpenCTI

Recorded Future

Job description

S&P Global is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze, and respond to security incidents, enrich investigations with timely intelligence, and drive proactive defences on a global scale.

Based in the UK but providing global coverage, you will partner with Security Operations and Threat Intelligence, build and refine playbooks, and deliver intel-informed insights to leadership while advancing detection capabilities across endpoints,