Threat Intelligence Investigator: Lead Adversary Analytics

Oracle; Reston (VA); On-site; USD 115,000 - 235,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

Stock Purchase Plan

Paid time off

Job summary

Oracle’s Threat Intelligence Center (OTIC) seeks an experienced Threat Intelligence Investigator to track threat actors, manage complex datasets, and produce actionable intelligence. You will lead investigations, develop new analytic methods, and communicate findings to executives and customers in a fast-paced environment.

The role requires strong cybersecurity passion, experience with incident response, and collaboration across security teams to strengthen Oracle’s defenses against APTs and

Qualifications

• Bachelor or Master of Science in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent practical experience.
• Experience with threat intelligence analysis, incident response, and OSINT research.

Responsibilities

• Lead investigations through in-depth analysis and collection efforts of suspected adversary campaigns to deliver actionable intelligence.
• Provide attribution analysis to identify threat actors and inform proactive defenses.
• Communicate complex technical matters to non-technical audiences including executives.
• Facilitate post-incident reviews to extract lessons learned and drive resolution actions.
• Stay current on emerging threats and vulnerabilities to enhance Oracle's defenses.
• Manage threat intelligence platforms (TIPs) and CTI tools to enrich data and streamline workflows.
• Collaborate with Cloud security teams during all phases of incident response to integrate findings into mitigation plans.
• Develop intelligence processes to ensure timely delivery of strategic, operational, and tactical intelligence.
• Elevate analytic quality via peer review and feedback to investigators.
• Handle high-volume, time-sensitive intelligence requests from internal and external customers.

Skills

OSINT research

Incident Response

SOC

Threat intelligence

Threat actor tracking

YARA

Snort

Suricata

Bro/Zeek

Cloud services

Windows

UNIX/Linux

macOS

Data analysis

Technical writing

Communication to non-technical

Education

Bachelor's or Master's in CS / Computer Engineering / Information Systems / Cybersecurity

Tools

YARA

Snort

Suricata

Bro/Zeek

Job description

Oracle’s Threat Intelligence Center (OTIC) seeks an experienced Threat Intelligence Investigator to track threat actors, manage complex datasets, and produce actionable intelligence. You will lead investigations, develop new analytic methods, and communicate findings to executives and customers in a fast-paced environment.

The role requires strong cybersecurity passion, experience with incident response, and collaboration across security teams to strengthen Oracle’s defenses against APTs and