Senior Cyber Threat Intelligence Analyst

Job Position: Senior Cyber Threat Intelligence Analyst

The Senior Cyber Threat Intelligence Analyst serves as a senior member of the Cyber Threat Intelligence program and is responsible for independently collecting, analyzing, enriching, and disseminating actionable intelligence on emerging cyber threats, adversary activity, and evolving attack trends. This role transforms complex technical and strategic threat information into actionable insights that support security operations, incident response, vulnerability management, and enterprise risk decisions.

The ideal candidate possesses deep expertise in cyber threat intelligence tradecraft, threat actor tracking, infrastructure analysis, and intelligence production. They operate with minimal supervision, lead complex intelligence investigations, provide authoritative threat assessments, and serve as a trusted advisor to technical teams and leadership. Success requires strong analytical thinking, sound judgment, technical curiosity, and the ability to communicate intelligence effectively across a broad range of stakeholders.

NXP is a global player in Semiconductor industry, and security is an essential and integral part of our business.

• Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability exploitation trends.
• Track threat actors and analyze their capabilities, targeting, infrastructure, and tactics, techniques, and procedures (TTPs).
• Conduct technical investigations using threat intelligence, open-source intelligence (OSINT), and infrastructure analysis techniques.
• Correlate intelligence from multiple sources and assess potential impact to the organization.
• Lead indicator of compromise (IOC) collection, enrichment, validation, and lifecycle management activities.
• Maintain intelligence records, indicators, and threat artifacts within the organization’s Threat Intelligence Platform (TIP).
• Develop and disseminate actionable threat advisories, intelligence reports, and emerging threat notifications.
• Support intelligence-sharing efforts with internal stakeholders and trusted external partners.
• Produce tactical, operational, and strategic intelligence products for technical and business audiences.
• Deliver intelligence briefings to security teams, leadership, and other stakeholders.
• Provide threat-informed recommendations that improve organizational awareness and preparedness.
• Serve as a subject matter expert on adversary activity, emerging threats, and cyber risk trends.
• Provide intelligence support during cybersecurity investigations and incident response activities.
• Perform adversary-focused analysis to support incident scoping, attribution, and impact assessments.
• Partner with Security Operations, Vulnerability Management, and Risk teams to provide threat context and intelligence insights.
• Identify intelligence gaps, emerging risks, and opportunities to strengthen defensive capabilities.

• 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
• Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
• Familiarity with nation-state actors, sophisticated cybercriminal groups, and supply chain threats.
• Experience in intelligence-driven hunting to identify suspicious network activity and potential risks.

• Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.
• Knowledge of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
• Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.
• Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.
• Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.
• Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.
• Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.
• Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.

• Strong analytical thinking, sound judgment, and technical curiosity.
• Strong communication and technical writing skills.
• Ability to communicate intelligence effectively to technical, business, and leadership stakeholders.
• Ability to operate with minimal supervision and lead complex intelligence investigations.

• Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.

More information about NXP in the United States...

NXP is an Equal Opportunity/Affirmative Action Employer regardless of age, color, national origin, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, marital status, status as a disabled veteran and/or veteran of the Vietnam Era or any other characteristic protected by federal, state or local law. In addition, NXP will provide reasonable accommodations for otherwise qualified disabled individuals.