Cyber Threat Analyst

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Threat Analyst based in United States. As a Cyber Threat Analyst, you’ll support active ransomware and cyber extortion engagements in a specialized incident response environment. You’ll help manage threat actor communications, maintain accurate case documentation, and track critical developments throughout engagements. The role combines cyber incident response, threat intelligence research, analytical investigation, and operational coordination. You’ll work alongside senior analysts and engagement leads to turn threat observations and communications into actionable case support. Your research will help teams understand threat actors, campaigns, malware, tactics, techniques, and procedures relevant to active incidents. Attention to detail, clear communication, and disciplined documentation will be essential when handling sensitive and time-critical information. This is a fully remote opportunity offering exposure to complex cybersecurity incidents and opportunities for professional growth. Support ransomware and cyber extortion engagements by assisting with written communications with threat actors under the direction of engagement leads. Draft, organize, and maintain communication logs, negotiation notes, timelines, demands, concessions, and other critical case records. Track threat actor responses, deadlines, proof-of-life requests, and other engagement developments to keep stakeholders informed. Coordinate professionally with internal teams and external partners to ensure communications are accurate, timely, and appropriately documented. Prepare concise case updates, summaries, handoff notes, technical documentation, and other materials for engagement leads and supporting teams. Maintain and contribute to negotiation templates, playbooks, procedures, and other operational resources. Research threat actor groups, campaigns, malware families, tools, tactics, techniques, and procedures relevant to active cyber extortion cases. Collect, assess, and summarize open-source and internal intelligence to provide context for active cases and support engagement strategy. Maintain actor profiles, intelligence notes, reference materials, and related artifacts within approved repositories and tracking systems. Identify opportunities to improve processes, consistency, responsiveness, documentation quality, and operational effectiveness. Comply with applicable corporate policies, procedures, security requirements, and business controls. Requirements: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline. At least 2 years of professional experience in cyber incident response, threat intelligence, investigations, customer communications, or a related analytical role. Strong foundational knowledge of cybersecurity concepts, cyber threats, incident response, and threat actor behavior. Excellent written and verbal communication skills, with the ability to communicate clearly and professionally in sensitive, high-pressure situations. Strong analytical and research abilities, including the capacity to gather, evaluate, synthesize, and communicate threat intelligence. Exceptional attention to detail when managing communications, indicators, timelines, technical information, and case records. Ability to produce concise technical reports, documentation, summaries, and handoff materials. Strong organizational and planning skills, with the ability to manage multiple case-related priorities and deadlines. Ability to work independently with limited supervision while collaborating effectively with senior analysts, engagement leads, internal stakeholders, and external partners. Familiarity with threat actor tactics, techniques, procedures, malware, cyber extortion, ransomware, or related areas is highly valuable. Advanced cybersecurity certifications such as CISSP, CISM, GCFE,