Cyber Threat Intelligence & Exposure Management Analyst

About the role

NXP is hiring a Cyber Threat Intelligence & Exposure Management Analyst in Austin (Oakhill). The analyst identifies, analyzes and communicates cyber threats and organizational exposures that pose risk to the enterprise, combining threat intelligence, attack surface visibility, digital risk monitoring, vulnerability intelligence and exposure management. The role supports Security Operations, Vulnerability Management, Incident Response, Engineering and Risk teams by prioritizing remediation on the risks that matter most.

Key responsibilities

• Monitor emerging threats, adversary activity, malware campaigns, vulnerability exploitation trends and geopolitical developments, and track threat actors' TTPs.
• Investigate using internal telemetry, threat intelligence platforms, OSINT and digital footprint analysis.
• Inventory and assess internet-facing assets, cloud resources, domains, certificates and external attack surfaces.
• Identify, validate and prioritize exposures such as vulnerabilities, misconfigurations, exposed services, shadow IT, credential exposures and third-party risks.
• Correlate threat intelligence with asset criticality and business context to give risk-based remediation recommendations.
• Lead IOC collection, enrichment, validation and lifecycle management, and maintain records in exposure management platforms.
• Produce tactical, operational and strategic intelligence products and briefings for leadership and security teams, and support incident response, attribution and threat hunting.
• Partner with Security Operations, Vulnerability Management, Cloud Security, Product Security and Risk Management teams, and develop metrics on exposure reduction and remediation effectiveness.

Required profile

• 5+ years of experience in Cyber Threat Intelligence, Exposure Management, Attack Surface Management, Vulnerability Management, Security Operations, Incident Response or related fields.
• Experience tracking threat actors and campaigns, assessing attack surface risks, and producing intelligence for technical and executive audiences.
• Ability to correlate threat intelligence with business context and asset criticality to support risk-based decisions.

Required skills

• MITRE ATT&CK, Cyber Kill Chain, Diamond Model, STIX/TAXII, intelligence lifecycle and exposure assessment methods.
• Exposure management and ASM platforms such as Cortex Xpanse, CrowdStrike Exposure Management, Rapid7 Exposure Command, Tenable, Wiz, Microsoft Defender EASM, Bitsight, SecurityScorecard.
• Threat intelligence platforms such as Anomali, ThreatConnect, ThreatQ, OpenCTI, MISP.
• Tools such as Maltego, VirusTotal, Shodan, Censys, GreyNoise, DomainTools, SecurityTrails, URLScan, PassiveTotal, URLScan.
• CVSS, EPSS, KEV, Sigma, YARA, Suricata, Snort, malware analysis, Python, automation, APIs, ELK Stack, Databricks, Power BI.