Cyber Threat Intelligence Analyst

About the role

Deloitte Global's Cybersecurity function protects data, standardizes security and secures critical infrastructure through security operations centers, and delivers security services to its global network of firms. As a Threat Intelligence Production and Dissemination Analyst, you will analyze the threat landscape, assess the relevance of threats and recommend ways to detect and mitigate them. The position is open in eight locations: Cincinnati, Hermitage, Indianapolis, Kansas City, Nashville, San Antonio, St. Louis and Tampa.

Key responsibilities

• Analyze and determine the relevance of threats and the cyber threat landscape, and articulate recommendations for detection and mitigation.
• Research and pivot on behavioral and atomic indicators, and research broad and targeted attacks.
• Create reports and deliver briefings.
• Research advanced, targeted attacks, campaigns, malware, AI-enabled threats (such as AI-generated phishing, deepfakes and malicious use of large language models) and emerging technologies to identify and report on attackers.
• Produce clearly written, concise research reports.

Required profile

• At least 1 year of experience in a cyber security field or in intelligence analysis.
• Excellent written and spoken English, and experience creating and presenting polished deliverables.
• Historical knowledge of major cyber threat actors, malware families and common attack methods and tools.
• Understanding of how intelligence is used by security appliances and operators.
• Ability to work in a dynamic, fast-paced environment and to apply structured analytic techniques such as Analysis of Competing Hypotheses.

Required skills

• Strong technical, writing and briefing skills.
• Familiarity with the MS Office suite (Word, PowerPoint, Excel, Outlook).
• Experience using AI tools, including leading models, to speed up research, drafting and analysis.