Senior Threat Intel & Incident Response Analyst

S&P Global, Inc.; New York (NY); Remote; USD 100,000 - 170,000; Full time

Job summary

S&P Global, Inc. is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze, and respond to security incidents, enrich investigations with threat intelligence, and drive proactive defences across endpoints, networks, cloud, and SaaS.

Based internationally with a focus on supporting global response needs, you will develop incident response playbooks, collaborate with SOC, and produce intel-informed reports for technical and non-technical stakeholders.

Qualifications

• 3+ years of information security experience with incident response, threat hunting, or threat intelligence.
• Experience mapping activity to MITRE ATT&CK and articulating likely TTPs.
• Hands-on with SIEM (Splunk) for investigations, alerting, reporting, and hunting.

Responsibilities

• Coordinate and triage response to cybersecurity events and conduct forensic analysis across endpoints, networks, cloud, and SaaS.
• Integrate threat intelligence into investigations (IOC enrichment, ATT&CK mapping, actor/tTP identification).
• Develop and operationalize IR playbooks, SOPs, PIRs and feedback loops to refine detections.
• Collaborate with SOC to investigate incidents and deliver containment, remediation, and root-cause analysis with intel-informed reports.
• Create and tune detections (SIEM/EDR) using intelligence signals and behaviors.

Skills

MITRE ATT&CK

Threat hunting

Incident response

SIEM Splunk

Threat intel

Education

Bachelor's degree in CS/IS

Tools

Splunk

MISP

OpenCTI

Recorded Future

Sigma/YARA

STIX/TAXII

Job description

S&P Global, Inc. is seeking a Cyber Incident Response Analyst to join the Cyber Defence team. You will detect, analyze, and respond to security incidents, enrich investigations with threat intelligence, and drive proactive defences across endpoints, networks, cloud, and SaaS.

Based internationally with a focus on supporting global response needs, you will develop incident response playbooks, collaborate with SOC, and produce intel-informed reports for technical and non-technical stakeholders.