ZipRecruiter

Log In

1

Cyber Threat Intelligence Engineer Jobs (NOW HIRING)

Hireblazer

Cyber Threat Intelligence Analyst

Austin, TX · On-site

$60 - $80/hr

Cyber Threat Intelligence Analyst Duration: 12 months Location: Austin, TX (Onsite-Candidates must be local to the Austin area) Responsibilities: The Cybersecurity Operations Center (CSOC) Threat ...

Deloitte

Cyber Threat Intelligence

Baltimore, MD

Provide Cyber Threat Intelligence support to the clients. * Access and utilize client information and databases in adherence to all client policies, regulations, and procedures. * Expedite the ...

Deloitte

Cyber Threat Intelligence

Washington, DC · On-site

Provide Cyber Threat Intelligence support to the clients. * Access and utilize client information and databases in adherence to all client policies, regulations, and procedures. * Expedite the ...

Deloitte

Cyber Threat Intelligence

Rosslyn, VA · On-site

Provide Cyber Threat Intelligence support to the clients. * Access and utilize client information and databases in adherence to all client policies, regulations, and procedures. * Expedite the ...

IMRI

Cyber Threat Intelligence Analyst

Long Beach, CA · On-site

... engineering and threat hunting efforts. * Triage and prioritize threats , focusing on serious ... a Cyber Threat Intelligence Analyst. * Strong experience producing intelligence products for ...

previous pagenext page

Showing results 21-40

All JobsTechnology JobsNetworking JobsCyber Security Engineer JobsCyber Threat Intelligence Engineer Jobs

Cyber Threat Intelligence Engineer information

See salary details

$29.5K

$122.1K

$197.5K

How much do cyber threat intelligence engineer jobs pay per year?

As of Aug 21, 2026, the average yearly pay for cyber threat intelligence engineer in the United States is $122,108.00, according to ZipRecruiter salary data. Most workers in this role earn between $100,500.00 and $149,500.00 per year, depending on experience, location, and employer.

What is a cyber threat intelligence engineer?

A Cyber Threat Intelligence Engineer is a cybersecurity professional responsible for analyzing, interpreting, and responding to cyber threats facing an organization. They collect and assess data from various sources to identify potential attacks, vulnerabilities, and threat actors. Their work helps organizations anticipate cyber threats, strengthen defenses, and develop effective incident response strategies. They often collaborate with security teams, use specialized tools, and provide actionable intelligence to reduce risk.

What are the key skills and qualifications needed to thrive as a cyber threat intelligence engineer?

To thrive as a Cyber Threat Intelligence Engineer, you need a deep understanding of cybersecurity principles, threat analysis, malware investigation, and often a degree in computer science or related field. Familiarity with threat intelligence platforms, SIEM systems (such as Splunk or QRadar), and certifications like CISSP or GIAC are highly valuable. Analytical thinking, attention to detail, and strong communication skills help you interpret complex data and share actionable intelligence with stakeholders. These skills and qualifications are crucial for proactively identifying and mitigating evolving cyber threats, protecting organizational assets, and informing security strategies.

How does a cyber threat intelligence engineer typically collaborate with other teams to strengthen organizational security?

Cyber Threat Intelligence Engineers work closely with incident response, security operations, and IT teams to ensure timely detection and mitigation of threats. They analyze threat data and share actionable insights, often presenting findings to both technical and executive stakeholders. Regular coordination with these teams is essential for developing threat profiles, updating defense strategies, and responding to emerging vulnerabilities. This collaborative environment helps ensure that intelligence is effectively integrated into the organization's overall security posture.

What is the difference between Cyber Threat Intelligence Engineer vs Cyber Security Analyst?

AspectCyber Threat Intelligence EngineerCyber Security Analyst
Required CertificationsGCTI, CISSP, CEHCISSP, Security+, CEH
Work EnvironmentResearch-focused, threat analysis teamsMonitoring, incident response, security operations
Employer & Industry UsageTech firms, government agencies, cybersecurity companiesFinancial institutions, healthcare, government, private sector

While both roles focus on cybersecurity, the Cyber Threat Intelligence Engineer specializes in analyzing and predicting cyber threats through research and intelligence gathering. The Cyber Security Analyst primarily monitors security systems, responds to incidents, and maintains overall security posture. Understanding these differences helps organizations assign the right talent for specific cybersecurity needs.

More about Cyber Threat Intelligence Engineer jobs

What cities are hiring for Cyber Threat Intelligence Engineer jobs?

Cities with the most Cyber Threat Intelligence Engineer job openings:

What states have the most Cyber Threat Intelligence Engineer jobs?

States with the most job openings for Cyber Threat Intelligence Engineer jobs include:

What job categories do people searching Cyber Threat Intelligence Engineer jobs look for?

The top searched job categories for Cyber Threat Intelligence Engineer jobs are:

Cyber Threat Intelligence Engineer jobs near you
Infographic showing various Cyber Threat Intelligence Engineer job openings in the United States as of August 2026, with employment types broken down into 94% Full Time, 2% Part Time, and 4% Contract. Highlights an 85% Physical, 6% Hybrid, and 9% Remote job distribution, with an average salary of $122,108 per year, or $58.7 per hour.

Cyber Threat Intelligence Analyst

Hireblazer

Austin, TX • On-site

$60 - $80/hr

Contractor

Posted 10 days ago

Job description

Role: Cyber Threat Intelligence Analyst

Duration: 12 months

Location: Austin, TX (Onsite-Candidates must be local to the Austin area)

Responsibilities:

The Cybersecurity Operations Center (CSOC) Threat Intelligence Analyst is responsible for monitoring, analyzing, and operationalizing cyber threat intelligence across enterprise environments. This role ensures actionable intelligence is identified, prioritized, and disseminated to appropriate stakeholders to reduce cybersecurity risk and improve organizational awareness.

The selected individual will be responsible for administering threat intelligence platforms, supporting incident response activities, and integrating intelligence capabilities into existing security operations processes.

Team member will provide services in the following areas:

  • Triage threat intelligence alerts generated from intelligence platforms and external intelligence sources.
  • Create Security Incidents and route them to appropriate teams for investigation and resolution.
  • Analyze, validate, and distribute Critical and Zero-Day CVE advisories to impacted stakeholders.
  • Administer threat intelligence platforms, including tuning, scoping, content management, reporting, and platform optimization.
  • Upload, validate, and maintain the client organizational data within intelligence platforms, including user account inventories, technology asset information, business partner listings, and third-party vendor data.
  • Manage intelligence feed subscriptions and ensure threat intelligence data is properly integrated into cybersecurity monitoring systems.
  • Verify threat intelligence feed ingestion into SIEM platforms and troubleshoot feed-related issues.
  • Integrate threat intelligence platforms with the client systems, including SIEM, ServiceNow, ticketing workflows, and reporting solutions.
  • Develop operational reports, threat trend summaries, and executive-level intelligence briefings.
  • Collaborate with Incident Response, Security Operations, Vulnerability Management, and Infrastructure teams to support threat investigations and remediation activities.
  • Conduct threat analysis and forecasting to identify emerging risks affecting the client systems, vendors, and business functions.
  • Maintain documentation, procedures, and intelligence workflows supporting cybersecurity operations.

Required Skills:

  • 5 Years of Experience performing cyber threat intelligence analysis within a Security Operations Center (SOC) or Cybersecurity Operations environment
  • 5 Years of Experience with threat intelligence platforms such as Recorded Future, CrowdStrike Intelligence, Anomali, Mandiant, Flashpoint, or equivalent
  • 5 Years of Experience analyzing Indicators of Compromise (IOCs), adversary TTPs, malware campaigns, and vulnerability intelligence
  • 5 Years of Experience creating and managing security incidents, case management workflows, and incident escalation processes
  • 5 Years of Experience with SIEM technologies and intelligence feed integration
  • 5 Years of Knowledge of cybersecurity frameworks including MITRE ATT&CK, NIST Cybersecurity Framework, and CIS Controls
  • 5 Years of Experience communicating cybersecurity risks and intelligence findings to technical and non-technical stakeholders
  • 5 Years of Strong written communication, documentation, reporting, and analytical skills

Preferred (Optional):

  • Certified Threat Intelligence Analyst (CTIA) certification
  • GIAC Cyber Threat Intelligence (GCTI) certification
  • Experience administering Recorded Future platforms and intelligence modules
  • Experience integrating threat intelligence with Splunk, Microsoft Sentinel, QRadar, or equivalent SIEM platforms
  • Experience integrating cybersecurity tools with ServiceNow
  • Experience managing third-party risk intelligence or vendor intelligence programs
  • Experience with TAXII/STIX frameworks and automated intelligence sharing
  • Knowledge of vulnerability management, CVE monitoring, and zero-day response processes
  • Experience with scripting and automation using PowerShell or Python
  • Familiarity with state government cybersecurity operations and compliance requirements