Cyber Threat Intelligence Analyst (CTI)

About the Position

Redshift is looking for a Cyber Threat Intelligence (CTI) Analyst to join our team in Lisboa or Porto (Hybrid).

We are seeking a Cyber Threat Intelligence (CTI) Analyst to join our security operations team. This role will be responsible for collecting, analyzing, and disseminating cybersecurity threat intelligence, helping to anticipate, detect, and mitigate security risks affecting both the organization and our clients.

Responsibilities

• Collect, correlate, and analyze data from multiple sources (open source, dark web, intelligence feeds, information-sharing communities, among others);
• Identify trends, campaigns, and threat actors/groups (TTPs, IoCs, etc.) relevant to the organization’s context;
• Produce tactical, operational, and strategic intelligence reports to support decision-making and incident response;
• Work closely with SOC, Incident Response, and Vulnerability Management teams to contextualize and mitigate threats;
• Maintain and update Indicators of Compromise (IoCs) and threat profiles within internal systems;
• Continuously improve intelligence processes and sources, automating tasks whenever possible.

Requirements

• Degree in Computer Engineering, Cybersecurity, or a related field (or equivalent professional experience);
• Previous experience in CTI, SOC, Threat Hunting, or Incident Response roles;
• Hands-on experience with Threat Intelligence tools (e.g., MISP, OpenCTI, Recorded Future, ThreatConnect, VirusTotal, Maltego);
• Strong knowledge of MITRE ATT&CK, Diamond Model, Cyber Kill Chain frameworks, and TTP analysis;
• Ability to analyze and correlate technical and contextual information;
• Knowledge of networks, malware, vulnerabilities, and intrusion techniques;
• Strong written communication skills and experience producing both technical and executive reports;
• Good command of spoken and written English.

Nice to Have

• Relevant certifications such as CompTIA Cybersecurity Analyst (CySA+), Certified Threat Intelligence Analyst (CTIA), and/or equivalent;
• Knowledge of OSINT, malware analysis, or dark web monitoring;
• Scripting skills (Python, Bash, PowerShell) for automation and analysis.

We Offer

• The opportunity to join an experienced and dynamic team working on innovative cybersecurity projects;
• Continuous training plan and support for professional certifications;
• Health insurance.

If you are interested in this opportunity, please send your CV to [email protected]