Threat Intelligence Analyst

CyberBlade; United States; Remote; USD 70,000 - 95,000; Full time

Job summary

CyberBlade is seeking an Intelligence Analyst to gather, analyze and interpret intelligence from the open web, the dark web and feeds. You will turn signals into clear guidance that helps clients act before a threat reaches them.

You will collect intelligence from OSINT, dark web, and threat feeds using Maltego, Shodan, Recon-ng, and related tools to identify emerging risks, and deliver clear assessments for both technical and non-technical audiences.

Qualifications

• Experience gathering intelligence from social media, hacker forums, dark web and threat feeds.
• Ability to process large datasets into actionable findings.
• Proficiency with threat intel tooling and standard frameworks.
• Excellent written and verbal communication skills.

Responsibilities

• Analyze raw data to identify attack patterns and emerging threats.
• Produce clear, actionable intelligence reports for technical and non-technical audiences.
• Correlate intelligence with vulnerabilities and exploits, and align with security assessments.
• Advise clients on security posture, threat mitigation and incident response.
• Collaborate with security teams to strengthen defense and support red team exercises.
• Monitor sources, alert on emerging risks, and provide context during incidents.

Skills

OSINT & threat intel

Threat analysis

Analytical reasoning

Clear communication

Self-sufficiency

Incident response (nice to have)

Tools

Maltego

Shodan

Recon-ng

Censys

MISP

VirusTotal

Job description

Location Remote Department Threat Intelligence Reports to Head of Intelligence

As an Intelligence Analyst at CyberBlade, you gather, analyze and interpret intelligence from across the open web,the dark web and commercial feeds. You turn raw signals into clear guidance that helps clients act before a threat reaches them.

Collect intelligence from diverse sources (OSINT, dark web, threat feeds) using tools like Maltego, Shodan and Recon-ng to identify emerging risks.

Threat Analysis and Reporting

Analyze raw data to identify attack patterns and emerging threats, and produce clear, actionable intelligence reports for technical and non-technical audiences.

Vulnerability and Threat Correlation

Correlate intelligence with known vulnerabilities and emerging exploits, and work with penetration testers to align intelligence with security assessments.

Strategic Advising

Provide clients with actionable recommendations on security posture, threat mitigation and incident response based on current threat analysis.

Collaboration with Security Teams

Work closely with penetration testing and OSINT teams to strengthen security strategies and support red team exercises and social engineering tests.

Monitoring, Alerting and Incident Support

Continuously monitor intelligence sources, alert the team to emerging risks, and provide context and actionable intelligence during ongoing incidents.

Required Qualifications

What we are looking for

• Strong OSINT and threat intelligence skills. Proven ability to gather, analyze and synthesize intelligence from social media, hacker forums, dark web sites and threat feeds.
• Technical understanding of threats. In-depth knowledge of common tactics, techniques and procedures used by adversaries, including phishing, malware and APT activity.
• Threat intelligence tooling. Familiarity with Maltego, Shodan, Censys, Recon-ng, MISP and VirusTotal, and comfort working with other proprietary platforms.
• Analytical skills. Strong ability to process, interpret and contextualize threat data, and to turn large datasets into clear, actionable findings.
• Clear communication. Strong written and verbal skills, able to deliver technical findings in an accessible way for any audience.
• Self-sufficiency and initiative. Able to work independently and proactively, managing and prioritizing a workload with minimal oversight.
• Incident response knowledge (a plus). Experience in incident response and forensic investigation, to help support or triage incidents when needed.