Senior Cyber Threat Intelligence (CTI) Analyst

Immediate need for a talented Senior Cyber Threat Intelligence (CTI) Analyst. This is a 06+ Months Contract opportunity with long-term potential and is located in US (Remote). Please review the job description below and contact me ASAP if you are interested.

Job ID:26-35471

Pay Range: $50 - $60/hour.  Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).
 
Key Responsibilities:

• Define and maintain priority intelligence requirements (PIRs) aligned with business risk, ensuring each has a named consumer.
• Conduct workshops to keep PIRs current as business needs evolve.
• Map collection sources to PIRs, addressing gaps with relevant intelligence sources, including E-ISAC membership and dark-web coverage.
• Operate and manage the intelligence platform stack (MISP plus commercial feeds), ensuring validation and enrichment of data.
• Produce strategic, operational, and tactical intelligence, adhering to a standard of clarity and actionable recommendations.
• Integrate intelligence into detection engineering, incident response, and enterprise risk reporting.
• Establish and report on CTI metrics to drive continuous improvement.
• Maintain threat profiles and track adversaries relevant to the sectors of energy, mining, and digital assets.

Key Requirements and Technology Experience:

• 6+ years in cyber threat intelligence or a closely related cybersecurity role, with experience in building or maturing a CTI program.
• Hands-on experience with at least one major SIEM platform (Microsoft Sentinel preferred) and EDR tooling.
• Proficiency in threat intelligence platforms (MISP preferred; Recorded Future, Mandiant Advantage, or OpenCTI also relevant).
• Strong command of the MITRE ATT&CK framework, mapping TTPs to adversary groups.
• Expertise in the intelligence cycle and PIR-driven production, with the ability to communicate effectively to both technical and executive audiences.
• Knowledge of OSINT and dark-web tradecraft, along with a solid understanding of common attack vectors.
• Calm under pressure with demonstrated discretion in handling sensitive information.
• Certifications such as GCTI, GCIA, GCFE, OSCP, or CISSP.
• Experience in OT and ICS threat intelligence, particularly in the energy sector.
• Scripting skills (Python, PowerShell) for automating CTI and SIEM workflows.
• Familiarity with cloud security (AWS, Azure) and SaaS threat monitoring.
• Background in supporting digital-asset or fintech operations, energy infrastructure, or global supply chains.
• Exposure to converged cyber-physical security operations.

Our client is a leading Digital asset technology Industry and we are currently interviewing to fill this and other similar contract positions. If you are interested in this position, please apply online for immediate consideration.
 
Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy .