Cyber Threat Intelligence Analyst

Requisition ID: 6322

Country: United States

US Locations: Hermitage, Cincinnati, Indianapolis, Kansas City, Nashville, San Antonio, St. Louis, Tampa

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

Work you'll do

Do you thrive on developing creative and innovative insights to solve complex challenges? Want to work on next-generation, cutting edge products and services that deliver outstanding value and that are global in vision and scope? Work with other experts in your field? Work for a world-class organization that provides an exceptional career experience with an inclusive and collaborative culture? Do you want to work in one of the world’s largest holistic internal cybersecurity organizations? If you’re interested in proactively preventing, detecting, and responding to cyber-attacks across a complex global footprint, then Deloitte Global could be the perfect place for you. We’re looking for an analytical thinker passionate about cybersecurity to join our team.

Want to make an impact that matters? Consider Deloitte Global.

The Deloitte Global Cybersecurity function is responsible for enhancing data protection, standardizing, and securing critical infrastructure, and gaining cyber visibility through security operations centers. The Cybersecurity organization delivers a comprehensive set of security services to Deloitte’s global network of firms around the globe.

Work you’ll do As a Threat Intelligence Production and Dissemination Analyst, you will conduct analysis of and determine relevancy of threats and cyber threat landscape, and articulate recommendations for mitigating and detecting threats. The right candidate is a self-starter with excellent technical, writing, and briefing skills to perform duties such as, but not limited to, research and pivoting on behavioral and atomic indicators, researching broad and targeted attacks, creating a variety of reports, and delivering a variety of briefings. They also have competency with AI tools, including leading models, and are motivated to use them to accelerate research, drafting, and analysis. The right candidate is curious, tenacious, a problem solver, rigorous, and is a quick learner. Responsibilities include:

Perform research into advanced, targeted attacks, campaigns, malware, AI-enabled threats (e.g., AI-generated phishing, deepfakes, and malicious use of large language models), and other emerging technologies and techniques to identify and report on cyber-attacks and attackers.

Perform proactive research to identify, categorize and produce reports on new and existing threats.

Understand and evaluate the cyber threat landscape, and assess what threats are most relevant to Deloitte and the Deloitte executive audience.

Conduct insightful research on observed and noteworthy threats, as discovered using open and proprietary sources.

Produce short summaries, long analytical reports, and visual presentations on identified threats tailored to varying audiences (i.e. strategic briefs for leadership and other products in response to emerging requirements).

Supply actionable recommendations to other teams to bolster cyber security efforts Coordinate across a global, virtual team to deliver results in an inclusive manner amidst a diverse set of cultures and nationalities.

Identify opportunities to use AI tools to improve team processes and automate manual, repetitive tasks within the production and dissemination workflow.

The team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Minimum of 1+ years of experience in cyber security related field or intelligence analysis.

Excellent English communication skills, both written and verbal.

Experience creating and presenting polished deliverables.

Technical aptitude to translate raw technical analysis into polished deliverables independently and strong familiarity with MS Office suite (Word, Powerpoint, Excel, and Outlook).

Strong interpersonal skills and ability to work well with people of diverse cultures and backgrounds.

Historical knowledge of major cyber threat actors, major malware families, and most prominent cyberattack methods and tools.

Understanding of cyber threats and how intelligence is used by security appliances and operators.

Desire and ability to work in a dynamic, fast-paced environment.

Produce clearly written and concise research reports.

Experience using AI.

Ability to apply structured analytic techniques (e.g., Analysis of Competing Hypotheses) to corroborate findings across multiple sources, flag conflicting reporting rather than silently resolving it, and clearly convey confidence levels and assumptions in written products.

Proven ability to translate complex technical findings into clear, concise written products and to deliver polished briefings to both executive and technical audiences, in customer and public settings alike.

Ability to recognize and deal appropriately with confidential and sensitive information.

Bachelor’s degree in a cybersecurity, technology, intelligence studies, political-science, or international studies-related field of study or equivalent education-related experience.

Cybersecurity certifications: GCTI, GCIH, CEH, GREM or other related certifications.

Experience with Threat Intelligence Platform software such as ThreatConnect, Anomali, MISP, or other common platforms.

Experience using leading AI models to build agents, create effective prompts, and incorporate the results into existing production and analysis workflows.

Ability to use tools such as Splunk and Microsoft Defender to perform queries and search for relevant cyber event information.

Basic proficiency in Python or SQL is preferred, especially for querying datasets or automating routine analytical tasks.

Limited immigration sponsorship may be available.

Our culture

At Deloitte Global people are valued and respected for who they are – with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.

Professional development

From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.