Senior Threat Intelligence Analyst

Who We Are

At Newrez, we bring big thinkers and caring doers together to make home happen. We’re a team built on heart and hustle, united by a commitment to show up for our customers, our communities, and each other. We believe that when our people thrive, homeowners thrive - and that’s why we invest in your growth, wellbeing, and ability to make an impact.

Every day, we work to exceed the expectations of our residential mortgage borrowers and business partners through superior service, simple processes, and clear communication. We do this by empowering our employees, encouraging innovative solutions and recognizing great performance.

POSITION SUMMARY:

The Senior Threat Intelligence Analyst is a key individual contributor within the Cybersecurity organization, responsible for producing high-quality, actionable intelligence that enables the company to anticipate, detect, and respond to emerging threats. This role serves as a senior member of the Threat Intelligence function with mentorship responsibilities, supporting the development of junior analysts and strengthening intelligence maturity across the broader security organization.

The ideal candidate brings strong analytical rigor, deep understanding of the threat landscape, technical proficiency across modern cloud and hybrid environments, and the ability to translate complex intelligence findings into meaningful insights for both technical and non-technical audiences.

DESCRIPTION:

Essential Functions, Duties, and Responsibilities

Threat Intelligence Collection, Analysis & Production

• Lead intelligence collection and analysis across multiple domains including:
  • External attack surface monitoring
  • Brand impersonation, domain spoofing, and digital risk
  • Threat intelligence support for fraud prevention
  • Vulnerability intelligence and exploit monitoring
  • Malware trends, threat actor tactics, and campaign activity
  • Dark web and deep web monitoring
• Apply the full intelligence lifecycle (requirements, collection, analysis, dissemination, feedback) to produce timely and relevant insights.
• Conduct structured analytic assessments using frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
• Assess emerging threats to cloud environments, SaaS platforms, corporate endpoints, identity systems, and on-premises infrastructure.

Operational & Strategic Intelligence Output:

• Produce clear, actionable intelligence products including:
  • Tactical alerts for SOC and Incident Response
  • Threat actor profiles and campaign analysis
  • Vulnerability prioritization guidance supporting VM and AppSec teams
  • Threat hunt leads mapped to ATT&CK
  • Weekly/bi-weekly intelligence summaries for operational teams
  • Quarterly executive threat landscape briefings
• Support fraud, cyber defense, and engineering teams with tailored intelligence to inform detection engineering, risk mitigation, and control improvements.

Cross-Functional Collaboration:

• Partner with SOC, Incident Response, Vulnerability Management, Application Security, Engineering, Cyber Fraud, Risk, and other business teams to operationalize intelligence.
• Communicate complex technical findings to non-technical stakeholders in a clear, concise manner.
• Serve as a mentor to junior analysts, guiding analytical rigor, reporting quality, and investigative methodology.
• Help mature threat intelligence processes, workflows, and automation opportunities.

Technology & Tooling:

• Leverage enterprise threat intelligence platforms, security information and event management tools, cloud-native security capabilities, log aggregation pipelines, and attack surface monitoring platforms.
• Maintain a vendor-agnostic mindset to ensure intelligence is grounded in outcome-driven analysis rather than tooling.
• Ability to effectively and accurately convey information to others.
• Performs related duties as assigned by management.

Qualifications and Education Requirements:

• 5–8 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, or a related cybersecurity discipline.
• Experience within the financial sector or other highly regulated industries.
• Certifications such as:
  • GCTI (GIAC Cyber Threat Intelligence)
  • CTIA (EC-Council Certified Threat Intelligence Analyst)
  • GCIA, GNFA, GREM, or similar advanced certifications aligned with senior threat intelligence expectations.

Skills, Abilities, and Knowledge:

• Deep familiarity with:
  • Threat intellige