Threat Intelligence Analyst — Onsite, 5x/Week

Motion Recruitment; Irving (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Motion Recruitment's Irving, TX client is seeking a Threat Intelligence Analyst for a 12+ month contract. This onsite role focuses on collecting and analyzing OSINT from open sources, the dark web, and feeds to inform security decisions.

You will produce finished intelligence, support detection and response, and guide vulnerability prioritization. The role requires 3+ years in threat intel, a Bachelor's degree, and certifications such as GCTI, GCFA, CTIA, or CISSP.

Qualifications

• Bachelor's degree in Cybersecurity, Intelligence Studies, or related field.
• Working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques.
• Experience analyzing malware behavior, IOCs, and adversary infrastructure at a working level.
• Familiarity with SIEM, EDR, and threat intelligence platform tooling.
• Strong written and verbal communication skills, able to translate technical findings for non-technical audiences.

Responsibilities

• Monitor OSINT, closed forums, dark web sources, ISAC/ISAO feeds, and commercial threat feeds.
• Track threat actor groups, campaigns, malware families, and TTPs mapped to MITRE ATT&CK.
• Analyze IOCs, malware samples, and adversary infrastructure to assess relevance and risk.
• Correlate external threat data with internal telemetry to identify targeting or exposure.
• Produce and disseminate finished intelligence (advisories, actor profiles, trend reports).
• Provide tailored intelligence briefings to SOC, incident responders, and executives.

Skills

MITRE ATT&CK knowledge

Structured analytic techniques

OSINT monitoring

Threat intelligence lifecycle

Analytical writing & briefing

Education

Bachelor's degree (Cybersecurity / Intelligence Studies)

Tools

SIEM

EDR

Threat Intelligence Platform (TIP)

Job description

Motion Recruitment's Irving, TX client is seeking a Threat Intelligence Analyst for a 12+ month contract. This onsite role focuses on collecting and analyzing OSINT from open sources, the dark web, and feeds to inform security decisions.

You will produce finished intelligence, support detection and response, and guide vulnerability prioritization. The role requires 3+ years in threat intel, a Bachelor's degree, and certifications such as GCTI, GCFA, CTIA, or CISSP.