Cyber Threat Intelligence Analyst

Position Compensation Range:

Pay Rate Type:

Compensation may vary based on the job level and your geographic work location. Relocation support is offered for eligible candidates.

Primary Accountabilities

• Collect, analyze, and disseminate tactical threat intelligence to support detection, response, and mitigation.

• Monitor internal and external sources-including TIPs, OSINT, and commercial feeds-for emerging threats, IOCs, and adversary TTPs.

• Enrich SOC and EVM workflows with timely, actionable intelligence.

• Produce detailed intelligence reports, alerts, and briefings for SOC, Incident Response, Threat Hunt, and Vulnerability Management teams.

• Analyze phishing and social engineering campaigns targeting the organization.

• Support incident response by integrating contextual intelligence into investigations and playbooks.

• Develop and refine threat models, detection logic, and adversary tracking frameworks.

• Contribute to tabletop exercises and incident response playbook development.

• Maintain awareness of threat actor behaviors, malware trends, and infrastructure patterns.

• Continuously improve intelligence processes, tools, and knowledge management.

Specialized Knowledge & Skills Requirements

• 4+ years of experience in cyber threat intelligence or related cybersecurity roles.

• Strong working knowledge of CTI frameworks such as MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.

• Experience using threat intelligence platforms and integrating threat data into security operations.

• Proficiency in analyzing malware, network traffic, and system logs to identify adversary behaviors.

• Familiarity with scripting (e.g., Python, PowerShell) and data analysis tools for intelligence enrichment.

• Demonstrated ability to produce clear, actionable intelligence reports and briefings.

• Strong critical thinking and investigative skills, with experience applying structured analytic techniques.

• Effective collaborator with cross-functional teams and contributors to shared intelligence workflows.

• Ability to manage multiple priorities in a fast-paced, operational environment.

• Experience mentoring peers or contributing to team knowledge development.

Preferred Skills

• Industry certifications such as GCTI, GICA, GREM, or CISSP.

• Experience with STIX/TAXII, JSON, and other threat sharing standards.

• Understanding of geopolitical drivers of cyber operations and threat actor motivations.

• Experience working in or with a Cyber Fusion Center or SOC environment.

• Financial or insurance industry experience.

In this flex office/home role, you will be expected to work a minimum of 10 days per month from one of the following office locations: Madison, WI 53783; Boston, MA 02110
Candidates must reside within a 50-mile radius of the office location (or 35-mile radius for Boston. #LI-Hybrid

Licenses:

• Not Applicable.

Travel Requirements

• Up to 10%.

Physical Requirements

• Work that primarily involves sitting/standing.

Working Conditions

• Not Applicable.

• Offer to selected candidate will be made contingent on the results of applicable background checks

• Offer to selected candidate is contingent on signing a non-disclosure agreement for proprietary information, trade secrets, and inventions

• Sponsorship will not be considered for this position unless specified in the posting

We encourage you to apply even if you do not meet all of the requirements listed above. Skills can be used in many different ways, and your life and professional experience may be relevant beyond what a list of requirements will capture. We encourage those who are passionate about what we do to apply!

We provide benefits that support your physical, emotional, and financial wellbeing. You will have access to comprehensive medical, dental, vision and wellbeing benefits that enable you to take care of your health. We also offer a competitive 401(k) contribution, a pension plan, an annual incentive, 9 paid holidays and a paid time off program (23 days accrued annually for full-time employees). In addition, our student loan repayment program and paid-family leave are available to support our employees and their families. Interns and contingent workers are not eligible for American Family Insurance Group benefits.

We are an equal opportunity employer. It is our policy to comply with all applicable federal, state and local laws pertaining to non-discrimination, non-harassment and equal opportunity. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law.