Embedded Threat Intelligence Analyst

Sibylline Americas•San Francisco, CA

1d•Hybrid

About The Position

Sibylline is seeking a highly motivated and analytical Threat Intelligence Analyst to support a client's global security and risk management functions. Embedded within the client environment, the Threat Intelligence Analyst will identify, investigate, assess, and communicate threats and emerging risks impacting personnel, operations, assets, facilities, and brand reputation. The successful candidate will possess a strong understanding of intelligence analysis, investigative methodologies, threat actor research, and open-source intelligence (OSINT) collection. This role requires the ability to transform complex information into actionable intelligence that enables decision-makers to mitigate risk, enhance security operations, and support informed security and business decisions. The Threat Intelligence Analyst will work closely with stakeholders across corporate security, physical security, investigations, and business operations teams to deliver timely intelligence products, investigative findings, and operational support.

Requirements

Bachelor's degree or higher in Security Studies, International Relations, Criminal Justice, Political Science, Intelligence Studies, Business Management, Journalism, or a related discipline; or equivalent professional experience.
3+ years of professional experience in threat intelligence, intelligence analysis, investigations, OSINT, corporate security, trust and safety, or a related field.
Demonstrated experience conducting investigative research, intelligence collection, and threat analysis.
Experience researching threat actors, online communities, or emerging security threats.
Proven ability to produce high-quality analytical reports and intelligence products.
Experience supporting security, intelligence, investigations, trust and safety, or risk management programs within technology companies, government agencies, or private-sector intelligence organizations.
Strong understanding of threat intelligence, investigative methodologies, threat actor research, and intelligence collection and analysis practices.
Strong proficiency in OSINT collection, social media analysis, public records research, and online investigative techniques.
Experience utilizing commercial investigative and intelligence platforms such as LexisNexis, Dataminr, Flashpoint, or similar technologies.
Strong analytical and critical thinking skills with the ability to identify patterns, assess risk, and produce actionable intelligence from complex information.
Ability to communicate findings clearly and effectively through written products, briefings, and stakeholder engagement.
Demonstrated ability to manage multiple priorities in a dynamic environment while handling sensitive and confidential information with discretion.
Experience utilizing AI and emerging technologies to enhance research, information analysis, investigative workflows, and operational efficiency.
Commitment to objectivity, professional ethics, analytical rigor, and continuous learning.

Responsibilities

Monitor, collect, and analyze information from a variety of sources to identify threats, risks, and emerging trends impacting personnel, operations, assets, facilities, and brand reputation.
Conduct online investigations and assess threat actors, online communities, suspicious activity, and emerging risks relevant to corporate and physical security operations.
Produce timely intelligence products, investigative reports, alerts, and briefings to support decision-making and risk mitigation efforts.
Leverage OSINT methodologies, social media analysis, public records research, and commercial intelligence platforms to support intelligence collection and investigative activities.
Develop investigative leads, conduct due diligence and attribution research, and synthesize findings from disparate information sources into actionable intelligence.
Triage and respond to requests for intelligence and investigative support, delivering timely and relevant insights to stakeholders.
Support critical incident response efforts through rapid research, analysis, and dissemination of relevant information.
Maintain intelligence records, analytical databases, and case management systems to support ongoing operations.
Collaborate with cross-functional stakeholders to enhance threat identification, risk mitigation, and security outcomes.