Threat Intelligence Analyst

Direction → collection → processing → analysis → dissemination, the backbone of every intel program.

The shared language for describing adversary behavior.

Turn raw artifacts into detections and context.

Know the who and why, not just the what.

Good intel starts with reliable, diverse sources.

Operationalize and share intel at scale.

Inform leadership decisions and risk posture.

Feed detections and hunts directly.

Analysis nobody reads has zero value, write for the audience.

Track leaks, initial-access brokers, and chatter.