Senior Threat Intelligence Analyst

Sr. Threat Intelligence Analyst

TENEX is an AI-native, automation-first, built-for-scale Managed Detection and Response (MDR) provider. We are a force multiplier for defenders, helping organizations enhance their cybersecurity posture through advanced threat detection, rapid response, and continuous protection. Our team is composed of industry experts with deep experience in cybersecurity, automation and AI-driven solutions. Backed by leading investors, we are rapidly growing and seeking top talent to join our mission of revolutionizing the AI-Native MDR landscape.

We are looking for an investigative Sr. Threat Intelligence Analyst to join our Cybersecurity team. You will be responsible for identifying, evaluating, and communicating threats to our organization. Your primary mission is to turn the "noise" of the global threat landscape into clear, actionable intelligence that our Security Operations Center (SOC) and leadership can use to protect our customers. You will also be instrumental in the building and development of our threat intelligence program, collaborating with various security functions, and proactively identifying and helping to mitigate risks.

Culture is one of the most important things at TENEX.AI —check out our culture deck at culture.tenex.ai to experience how we champion it, valuing the unmatched collaboration and community of in-person work while offering flexibility for the best of the best.

The ideal candidate will be able to work onsite at our HQ based in Sarasota, FL (Tampa Metro Area) or Overland Park, KS (KC Metro Area).

If you're looking at this position and you are not located in either of our physical locations, we strongly recommend you consider accepting one of our lucrative relocation packages to our epic hubs in Sarasota, Florida (outside Tampa), or Overland Park in the Kansas City metro—where trailblazers redefine cybersecurity with 10x impact!

Core Responsibilities

• Execute all phases of the intelligence lifecycle: planning, collection, analysis, production, and dissemination.
• Track specific threat actors and groups. You will map their Tactics, Techniques, and Procedures (TTPs) using the MITRE ATT&CK framework to identify gaps in our current defenses.
• Monitor geopolitical events, industry trends, and the dark web to provide "big picture" briefings on how the threat landscape is evolving.
• Extract and validate technical Indicators of Compromise (IOCs) from malware reports and OSINT to ensure our blocklists are high-fidelity and low-noise.
• Assist in the proactive research, identification, and collection of threat intelligence from various sources, including open-source intelligence (OSINT), commercial feeds, and internal security data.
• Produce high-quality written reports, ranging from "Flash Alerts" for urgent threats to monthly blogs or executive summaries for leadership.
• Monitor and analyze vulnerability disclosures and exploit trends to provide initial insights into potential risks.
• Act as a bridge between technical teams (Incident Response) and non-technical stakeholders, translating complex exploits into business risk.

Required Qualifications

• 6+ years of experience in cybersecurity, with at least 4+ years specifically focused on threat intelligence or a closely related field (e.g., Security Operations Center (SOC) analysis).
• Familiarity with the Intelligence Cycle, Threat frameworks and methodologies (e.g. MITRE ATT&CK, Diamond Model, Cyber Kill chain, Pyramid of Pain, STIX/TAXII).
• Proficiency in OSINT and Commercial tools and techniques (e.g., Shodan, VirusTotal, INTEL471, WHOIS, Maltego).
• Exceptional writing skills; you must be able to explain why a threat matters to the business, not just what the threat is.
• Ability to apply structured analytic techniques to avoid cognitive biases in your assessments.

Technical Skills & Tools

• Experience using Threat Intelligence Platforms (e.g., ThreatConnect, OPEN CTI).
• LLMs and security information and event management (SIEM) systems and automation
• Experience with AI coding platforms (Cursor, Claude etc) and scripting languages
• Knowledge of STIX/TAXII protocols for sharing threat intelligence.
• Ability to understand a sandbox report or basic static analysis to extract command-and-control (C2) infrastructure.

The Ideal Candidate

• Experience with AI coding platforms (Cursor, Claude etc) and scripting languages (e.g., Python) for data manipulation or automation are a plus.
• Relevant cybersecurity certifications (e.g., CompTIA Security+, GCTI, etc.).
• You don't just find a malicious IP; you want to find out who owns it and what they were trying to achieve.
• You are a continuous learner who follows security researchers on social media and stays up-to-date with the latest Zero-Day disclosures.
• You can stay calm and objective during high-pressure security incidents.

Why Join Us?

• Opportunity to work with cutting-edge AI-driven cybersecurity technologies and Google SecOps solutions.
• Collaborate with a talented and innovative team focused on continuously improving security operations.
• Competitive salary and benefits package.
• A culture of growth and development, with opportunities to expand your knowledge in AI, cybersecurity, and emerging technologies.

If you're passionate about combining cybersecurity expertise with artificial intelligence and have experience with Google SecOps and Chronicle, we encourage you to apply!