SPG - Threat Intelligence Analyst

Curious about what it’s like to work at Cognyte?

At Cognyte, you’ll collaborate with expert colleagues around the globe to solve problems most people will never even know exist!

You’ll be part of building unique solutions shaped by real investigative methodologies, enabling our customers to identify, investigate, visualize and prevent criminal, terror and security threats worldwide.

These solutions are used by law enforcement, national security, and national and military intelligence agencies in almost 100 countries to turn massive, diverse data into clear, actionable intelligence for a safer world.

We are currently looking for an Experienced Threat Intelligence Analyst in North America - (Remote).

As an Experienced Threat Intelligence Analyst, you will support the identification, analysis, and reporting of cyber threats targeting customers, industries, and emerging technologies. You will conduct research across open, deep, and dark web sources to identify indicators of threat activity, assess potential impacts, and produce actionable intelligence for stakeholders. 

The analyst will work collaboratively with intelligence, security, and customer-facing teams to support intelligence requirements, investigate emerging threats, and deliver timely intelligence products. Success in this role requires strong analytical thinking, curiosity, technical aptitude, and the ability to transform complex information into clear, actionable reporting. 

As a Cognyter you will:

• Collect, research, and analyze threat intelligence from open, deep, and dark web sources, social media, forums, and commercial intelligence platforms.
• Monitor and assess threat actors, cybercrime activity, vulnerabilities, malware campaigns, and emerging threats relevant to customer environments.
• Correlate information from multiple sources to identify indicators, trends, risks, and actionable intelligence insights.
• Produce high-quality intelligence reports, assessments, alerts, and briefings for internal and external stakeholders.
• Support customer intelligence requirements through timely intelligence production and threat notification activities.
• Apply analytical methodologies and intelligence tradecraft to develop accurate and defensible intelligence assessments.
• Collaborate with product, engineering, security, and operational teams to support investigations, threat hunting, and intelligence-driven decision making.
• Contribute to the continuous improvement of intelligence processes, collection programs, knowledge repositories, and reporting standards.
• Deliver dedicated demos, value propositions, and remotely facilitate client onboarding, monthly touchpoint calls, and Quarterly Business Reviews to support renewal and cross-sell functions.
• Provide Q&A and product feedback

Requirements

For that mission you’ll need:

• Bachelor’s degree or Practical Engineer diploma in a relevant technical field, or equivalent professional experience.
• 2-5 years of experience in threat intelligence, cybersecurity, intelligence analysis, investigations, or related disciplines.
• Working knowledge of cyber threat intelligence methodologies, intelligence lifecycle concepts, and structured analytical techniques.
• Experience conducting intelligence collection and research using OSINT, social media, dark web, and other publicly available sources.
• Understanding of threat actors, cybercrime, malware, ransomware, phishing, social engineering, and common attack methodologies.
• Familiarity with networking concepts, operating systems, internet protocols, and vulnerability management frameworks.
• Strong analytical, critical-thinking, and problem-solving skills with the ability to produce actionable intelligence assessments.
• Proactive, highly motivated team player with excellent communication skills, sound judgment, attention to detail, and a customer-focused mindset
• Exceptional SLA Management and Reporting Skills
• Hands-on troubleshooting skills with OS such as Linux / Unix / Windows Server
• Virtualization technologies in clusters configuration
• Experience with container orchestration and management using Kubernetes
• LAN network equipment configuration and integration

 Advantage: 

• Enterprise server hardware (e.g. Dell, Cisco, HP, Dell, Intel, IBM)
• Telecommunications protocols and technologies (GSM / GPRS / 5G / UMTS / 4G (LTE) / VoLTE)
• Analysis technology (Packet sniffing and capture. Data traffic and packet stream analysis tools)
• Scripting with languages such as, Python or PowerShell, for automation and system administration