Threat Intelligence / OSINT Analyst

Overview of Opportunity

The Threat Intelligence / OSINT Analyst is responsible for collecting, analyzing, and producing intelligence derived from publicly available information and digital threat environments. This role monitors and investigates cyber, criminal, geopolitical, and emerging technology threats using open-source data, social media platforms, dark/deep web ecosystems, and technical telemetry. The analyst transforms raw information into actionable insights that support operational teams, cybersecurity functions, investigative units, and executive leadership.

Key Responsibilities:

Open Source Digital Intelligence Collection

• Conduct research across open sources, social media, forums, news media, code repositories, and publicly available datasets.
• Perform structured online investigations using non-attributable browsing, advanced search techniques, and OSINT tradecraft.
• Gather intelligence from deep web/dark web platforms, leveraging secure and compliant access methods (e.g., TOR, VPNs).
• Identify new sources of relevant information, including emerging platforms, niche communities, and alternative data streams.
• Monitor threat actor activity, illicit marketplaces, malware communities, and cybercriminal trends.

Threat Intelligence Analysis

• Evaluate collected data to identify indicators, patterns, and threat signatures related to cyber, criminal, or geopolitical activity.
• Produce tactical, operational, and strategic intelligence products tailored to stakeholder needs.
• Correlate multi-source information—including OSINT, SOCMINT, GEOINT, technical telemetry, and dark web reporting—to develop comprehensive threat assessments.
• Support cybersecurity teams by identifying IOCs, TTPs, adversary profiles, and vulnerability exploitation trends.
• Conduct attribution assessments and contextual analysis on threat actors and campaigns.

Intelligence Production Communication

• Create written intelligence reports, visualizations, briefings, and dashboards to communicate findings to leadership and operational units.
• Present analysis to technical and non-technical audiences, providing clear recommendations and assessments.
• Maintain intelligence requirements (IRs/PIRs) and contribute to the continuous refinement of collection priorities.
• Collaborate with cybersecurity, investigations, legal, engineering, and executive teams to ensure intelligence aligns with organizational mission needs.

Required Skills Qualifications

• Experience in OSINT collection, cyber threat intelligence, digital investigations, or related intelligence fields.
• Strong knowledge of cyber threat actor TTPs, global threat trends, and online malicious ecosystems.
• Proficiency with OSINT tools, SOCMINT techniques, and open-source research methodologies.
• Ability to investigate across social media platforms, online communities, marketplaces, and technical repositories.
• Familiarity with TOR, VPNs, encryption tools, operational security (OPSEC), and non-attributable research methods.
• Understanding of cybersecurity fundamentals, including IOCs, malware behaviors, vulnerabilities, and incident response workflows.
• Excellent analytical and critical thinking skills, with the ability to derive insights from incomplete data.
• Strong written and verbal communication abilities, including producing concise intelligence products.

Preferred Qualifications

• Experience in cyber investigations, digital forensics, or law enforcement intelligence.
• Knowledge of scripting (Python), data analysis, or OSINT automation tools.
• Familiarity with SIEMs, TIPs, dark web monitoring platforms, and enterprise security tooling.
• Background in geopolitical analysis or regional expertise relevant to mission focus.
• Prior service in defense, national security, or intelligence community organizations.

Impact of the Role: The Threat Intelligence / OSINT Analyst plays a critical role in detecting and understanding emerging threats, enhancing situational awareness, and enabling proactive decision-making across the organization. This position strengthens organizational security by combining deep research capability with analytical rigor to uncover adversarial activity before it becomes a critical risk.