Ascension

Cybersecurity Threat Intelligence Specialist

Ascension$105K — $147K *
US-AnywhereRemote in United States
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • High School diploma or equivalent with 2 years of experience, Associate's degree/Bachelor's degree, or 4 years of relevant work experience required.
  • Advanced proficiency in automation scripting (Python, PowerShell) for CTI workflows and data integration.
  • Hands-on experience with specialized threat analysis tools (DomainTools, Intel 471, Maltego, VirusTotal Enterprise).
  • Active certifications in advanced security or threat intelligence (GIAC Cyber Threat Intelligence, Certified Threat Intelligence Analyst, GIAC Certified Forensic Analyst).

Responsibilities

  • Collect and analyze multi-source telemetry for adversary profiling and threat actor mapping.
  • Manage and optimize the Threat Intelligence Platform to process and deduplicate IOCs.
  • Design and execute hypothesis-driven threat hunting scopes alongside security teams.
  • Provide real-time intelligence support during active security incidents to various teams.
  • Synthesize complex technical data into actionable insights and threat assessments.

Benefits

  • Remote work flexibility
  • Full-time schedule
  • Opportunity to work in a dynamic and challenging security environment
  • Access to advanced threat intelligence tools and platforms
  • Professional development opportunities in threat intelligence and cybersecurity certifications.
Full Job Description
Your future role at a glance

Location: Remote

Department: Security

Schedule: Full Time, Day

Salary: $105,830.21 - $147,521.09 per year

#LI-Remote

How you'll make an impact in this role

  • Adversary Attribution & Mapping: Collect, pivot, and analyze multi-source telemetry-including OSINT, commercial feeds, deep/dark web forums, and internal technical logs-to profile threat actors, track localized and global cyber campaigns, and map adversary TTPs directly to the MITRE ATT&CK framework.
  • Detection Engineering & TIP Optimization: Manage, tune, and optimize the Threat Intelligence Platform (TIP) to ingest, score, and deduplicate IOCs, collaborating with SIEM/SOAR and Detection Engineering teams to translate threat trends into actionable YARA, Sigma, and SIEM rules.
  • Proactive Hypothesis-Based Hunting: Partner with security teams to design and execute hypothesis-based threat hunting scopes and conduct retroactive hunts across data lakes and internal security platforms utilizing newly identified indicators and zero-day vulnerability intelligence.
  • Incident Response Fusion & Advisory: Provide real-time, context-driven intelligence support during active security incidents, delivering critical briefings on attacker infrastructure, capabilities, and intent to the Incident Response (IR), SOC, and DevSecOps teams.
  • Strategic & Operational Intelligence Synthesis: Synthesize complex, abstract technical data into high-impact threat assessments, flash reports, and threat actor profiles ("baseball cards"), contextualizing technical risks into actionable operational insights for both technical stakeholders and executive leadership.

What minimum requirements you'll need

Education:

  • High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required.

What additional preferences we're seeking

  • Advanced proficiency in developing automation scripts (e.g., Python, PowerShell) to streamline CTI workflows, automated enrichment, data parsing, and tool/API integration.
  • Hands-on experience with specialized external threat landscape and enrichment tools (e.g., DomainTools, Intel 471, Maltego, or VirusTotal Enterprise).
  • Active advanced security or threat intelligence certifications, such as GIAC Cyber Threat Intelligence (GCTI), Certified Threat Intelligence Analyst (CTIA), or GIAC Certified Forensic Analyst (GCFA).


Responsibilities

  • Adversary Attribution & Mapping: Collect, pivot, and analyze multi-source telemetry-including OSINT, commercial feeds, deep/dark web forums, and internal technical logs-to profile threat actors, track localized and global cyber campaigns, and map adversary TTPs directly to the MITRE ATT&CK framework.
  • Detection Engineering & TIP Optimization: Manage, tune, and optimize the Threat Intelligence Platform (TIP) to ingest, score, and deduplicate IOCs, collaborating with SIEM/SOAR and Detection Engineering teams to translate threat trends into actionable YARA, Sigma, and SIEM rules.
  • Proactive Hypothesis-Based Hunting: Partner with security teams to design and execute hypothesis-based threat hunting scopes and conduct retroactive hunts across data lakes and internal security platforms utilizing newly identified indicators and zero-day vulnerability intelligence.
  • Incident Response Fusion & Advisory: Provide real-time, context-driven intelligence support during active security incidents, delivering critical briefings on attacker infrastructure, capabilities, and intent to the Incident Response (IR), SOC, and DevSecOps teams.
  • Strategic & Operational Intelligence Synthesis: Synthesize complex, abstract technical data into high-impact threat assessments, flash reports, and threat actor profiles ("baseball cards"), contextualizing technical risks into actionable operational insights for both technical stakeholders and executive leadership.


Qualifications

Education:

  • High School diploma equivalency with 2 years of cumulative experience OR Associate's degree/Bachelor's degree OR 4 years of applicable cumulative job specific experience required.

About Ascension

Ascension is a healthcare company that provides a range of services, including hospital care, primary care, and specialty care. The company operates more than 150 hospitals and 50 senior living facilities across the United States. Ascension also offers health insurance and other healthcare-related services. The company was founded in 1999 and is headquartered in St. Louis, Missouri.
Learn more about Ascension
Size
165,000 employees
Industry
Founded
1999

Similar Jobs

More Jobs at Ascension

More Information Technology Jobs

Find similar Cybersecurity Threat Intelligence Specialist jobs: