Senior Threat Intelligence Analyst

• Job Title: Senior Threat Intelligence Analyst
• Department: Security
• Location: Espoo, Finland
• Reports to: Cyber Resilience & Threat Intelligence Lead
• Contract: Permanent
• Work Model: Hybrid (3 days onsite and 2 days remote)
• Employment is subject to applicable security screening.

The Mission of the Senior Threat Intelligence Analyst

To deliver timely, actionable threat intelligence that enables the organization to proactively detect, understand, and mitigate cyber threats, strengthening overall security resilience.

As a Senior Threat Intelligence Analyst, you will serve as a hands-on intelligence practitioner, collecting and analyzing data from multiple sources to identify adversary tactics, techniques, and procedures using frameworks such as MITRE ATT&CK. You will produce high-quality tactical intelligence, collaborate closely with SOC and incident response teams, and translate complex threat activity into clear, actionable insights.

As a key contributor to the global security function, you will balance deep technical analysis with strategic impact—improving threat intelligence processes, enhancing operational efficiency, and delivering concise briefings to senior leadership to inform risk-based security decisions.

Who We Are

ICEYE delivers space-based intelligence, surveillance, and reconnaissance (ISR) capabilities to governments and allied nations. This includes sovereign and turnkey ISR missions leveraging ICEYE’s world-leading synthetic aperture radar (SAR) satellite technology, as well as access to data from the world’s largest SAR satellite constellation. These capabilities enable partners to detect and respond to critical changes anywhere on Earth with unprecedented speed and accuracy – day or night and in any weather, supported by ultra high-resolution imagery and high-frequency revisits.

As a trusted partner for defense, intelligence, security, and maritime domain awareness, ICEYE’s near real-time data creates a tactical advantage for mission-critical operations. Designed for dual use, the platform also serves civil protection and commercial users for natural-catastrophe intelligence, insurance, maritime monitoring (including oil-spill detection), and finance, contributing to global security and community resilience.

ICEYE operates internationally with offices in Finland, Poland, Spain, Japan, the UAE, Greece, and the US. The company has more than 900 employees, inspired by the shared vision of improving life on Earth by becoming the global source of truth in Earth Observation.

Requirements

Expected Outcomes

As our Senior Threat Intelligence Analyst you will be responsible for:

• Integrating actionable threat intelligence into SOC, incident response, and vulnerability management workflows to improve detection and response effectiveness.
• Analyzing malicious infrastructure, malware, and adversary artifacts to extract high-fidelity IOCs and map TTPs using frameworks such as MITRE ATT&CK.
• Enabling threat detection, attribution, and information sharing through the effective use of threat intelligence platforms, STIX/TAXII feeds, and automated intelligence sharing mechanisms.
• Producing and disseminating clear, timely operational and tactical intelligence products, including threat briefings, reports, and summaries tailored to technical teams and senior leadership.
• Providing expert intelligence support during major security incidents by correlating external threat data with internal telemetry.
• Enhancing threat hunting activities by supplying contextual intelligence that identifies emerging threats and suspicious behaviors within the environment.
• Delivering actionable cyber resilience recommendations based on threat intelligence and OSINT analysis, aligned with regulatory and legal requirements.

Role-specific Competences:

• Proven experience (5+ years) in information security, threat intelligence, national CERT/CSIRT, intelligence, or law enforcement environments.
• Extensive hands-on experience (minimum 4 years) using threat intelligence platforms (e.g. MISP) and analysis frameworks such as MITRE ATT&CK in a customer-facing or operational role.
• Strong capability in analyzing infrastructure-related threats and conducting open-source, deep web, and dark web research.
• Demonstrated expertise in utilizing STIX/TAXII feeds and automated intelligence sharing solutions.
• Solid understanding of the Finnish Cyber Security Act (NIS2), GDPR, and applicable local regulations.
• Industry-recognized certifications such as GIAC Cyber Threat Intelligence (GCTI) or equivalent.
• Excellent Engl