Threat Intelligence Analyst

Motion Recruitment; Irving (TX); On-site; USD 90,000 - 150,000; Full time

Job summary

Motion Recruitment is seeking a Threat Intelligence Analyst for a 12+ month contract in Irving, TX. The role is onsite 5 days a week and pays on a 100% W2 basis. Requires strong threat intelligence experience, MITRE ATT&CK knowledge, and the ability to translate complex findings into actionable guidance for SOC, IR, and leadership.

You will track threat actors, analyze IOCs and infrastructure, produce finished intelligence, and support vulnerability prioritization and detection engineering.

Qualifications

• Experience in threat intelligence, security operations, incident response, or related security discipline.
• Understanding of MITRE ATT&CK, intelligence cycle, and structured analytic techniques.
• Ability to analyze malware behavior, IOCs, and adversary infrastructure.
• Ability to translate findings for non-technical audiences and produce finished intelligence.

Responsibilities

• Track threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CK.
• Analyze IOCs, malware samples, and adversary infrastructure to assess risk.
• Correlate external threat data with internal telemetry to identify exposure.
• Produce and disseminate finished intelligence and threat advisories.
• Deliver tailored intelligence briefings to SOC analysts, IR, and executives.
• Maintain a prioritized threat landscape view for industry and tech stack.

Skills

Threat intelligence

Analytical thinking

Communication

Prioritization under pressure

MITRE ATT&CK knowledge

Structured analytic techniques

Education

Bachelor's degree in Cybersecurity / CS / Intelligence Studies

Tools

SIEM

EDR

Threat Intelligence Platform tooling

Job description

Our Irving, TX Client is seeking a Threat Intelligence Analyst for a 12+ month contract opportunity. Onsite 5x a week.

About the Role

This is a 100% W2 role. Candidates who can work without requiring sponsorship are considered. The final interview will be onsite in Irving, TX

Responsibilities

• Track threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CK
• Analyze indicators of compromise (IOCs), malware samples, and adversary infrastructure to assess relevance and risk
• Correlate external threat data with internal telemetry, logs, and detections to identify targeting or exposure
• Produce and disseminate finished intelligence
• Write finished intelligence products, including threat advisories, actor profiles, campaign briefs, and trend reports
• Deliver tailored intelligence briefings to SOC analysts, incident responders, and executive and board-level stakeholders
• Maintain a prioritized threat landscape view specific to the organization's industry, geography, and technology stack
• Track and report on threat intelligence program KPIs, such as report timeliness, actionability, and stakeholder feedback
• Support detection, response, and vulnerability prioritization
• Translate intelligence into detection logic, hunting hypotheses, and SIEM/EDR content in partnership with detection engineering
• Provide threat context during incident response to support scoping, attribution, and containment decisions
• Prioritize vulnerability remediation using exploitation likelihood, threat actor interest, and active exploitation data
• Support red team, purple team, and adversary emulation exercises with current TTP and actor-based scenarios
• Manage intelligence infrastructure and sources
• Administer and tune the threat intelligence platform (TIP), including feed integration and IOC lifecycle management
• Evaluate, onboard, and manage commercial and open-source intelligence feeds and vendor relationships
• Maintain intelligence collection requirements and refine them based on stakeholder needs and changes in the threat landscape
• Apply structured analytic techniques and the intelligence cycle to reduce bias and improve confidence levels in assessments
• Build and maintain relationships with industry ISACs, law enforcement, and peer intelligence teams for information sharing
• Contribute to the organization's threat intelligence strategy, standards, and playbooks
• Train SOC, IR, and Vulnerability Management teams on how to consume and apply intelligence products
• Brief leadership on emerging threats, sector-specific risk, and geopolitical developments that may affect the organization

Qualifications

• 3+ years of experience in threat intelligence, security operations, incident response, or a related security discipline

Required Skills

• Bachelor's degree in Cybersecurity, Computer Science, Intelligence Studies, or related field, or equivalent experience
• Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques
• Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level
• Familiarity with SIEM, EDR, and threat intelligence platform tooling
• Strong written and verbal communication skills, with the ability to translate technical findings for non-technical audiences
• Ability to prioritize and manage multiple concurrent intelligence requirements under time pressure
• Sound analytic judgment, including the ability to state confidence levels and acknowledge uncertainty in assessments

Preferred Skills

• Bachelor’s degree in Cybersecurity, Intelligence Studies, or related field
• Industry certifications such as GCTI, GCFA, CTIA, or CISSP

Pay range and compensation package

Not specified.

Equal Opportunity Statement

We are committed to diversity and inclusivity.