Cyber Threat Intelligence Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Threat Intelligence Analyst based in Canada. As a Cyber Threat Intelligence Analyst, you will develop practical experience turning incomplete and complex threat information into actionable intelligence. You will assess sources, threat actors, tactics, techniques, indicators, and intelligence gaps within realistic simulated environments. The role focuses on understanding what threats mean, why they matter, and what organizations should consider doing next. You will practice structured analytical reasoning, evaluate competing hypotheses, and communicate confidence and uncertainty effectively. Your work will include producing intelligence assessments and translating technical findings into concise insights for decision-makers. The experience is designed for aspiring analysts, cybersecurity professionals, students, graduates, career changers, and self-taught practitioners. All activities are conducted within controlled simulations for legitimate defensive, educational, and professional-development purposes. Accountabilities - Threat-information triage: Review multiple pieces of simulated threat information and determine which intelligence is relevant to organizational priorities and warrants further investigation. - Source evaluation: Assess the reliability, credibility, relevance, and quality of intelligence sources and explain how these factors affect analytical confidence. - Threat-actor analysis: Examine available intelligence on simulated threat actors to assess motivation, capabilities, targeting patterns, behaviors, and relevance to an organization.

- TTP analysis: Analyze simulated tactics, techniques, and procedures associated with malicious activity and determine their implications for defensive priorities. - Indicator analysis: Evaluate indicators of compromise within their broader context, considering their evidential significance rather than treating individual indicators as conclusive. - Intelligence requirements: Identify critical intelligence gaps and define the additional information needed to support better organizational decision-making. - Threat prioritization: Compare multiple simulated threats and determine their relative importance based on organizational relevance, likelihood, potential impact, and available evidence. - Structured analysis: Evaluate competing explanations or hypotheses and communicate why the available evidence supports one assessment more strongly than another. - Threat assessment: Synthesize information from multiple sources into clear assessments explaining what is happening, why it matters, and what defensive actions should be considered. - Confidence assessment: Clearly communicate the level of confidence associated with intelligence judgments, including assumptions, evidence limitations, and areas of uncertainty. - Executive communication: Translate technical threat information into concise, decision-relevant intelligence suitable for senior stakeholders. - Defensive recommendations: Develop proportionate defensive priorities based on intelligence findings and within the scope of legitimate defensive security. - Assessment updates: Reassess previous judgments when new information becomes available and demonstrate how additional evidence changes—or confirms—the original assessment. - Professional artefacts: Produce practical intelligence outputs such as threat assessments, threat-actor profiles, executive briefs, intelligence requirements documents, TTP assessments, indicator assessments, confidence statements, and intelligence updates.