Remote Cyber Intelligence Analyst Jobs
Remote cyber intelligence analyst jobs are open across the U.S. in government contracting, financial services, and cybersecurity consulting, with distributed teams ranging from entry-level threat intelligence roles to senior analyst and team lead positions. Employers actively hiring remotely right now include Amentum, Macquarie, and CyberCube Analytics. Scan the live roles below and apply to whichever ones fit.
Find JobsOverview
Showing 5 of 5+ Remote Cyber Intelligence Analyst jobs
Looking for more remote cyber intelligence analyst jobs?
Explore related role searches to find more openings that fit.
See related jobsCyber Technical Intelligence Analyst
- DEPARTMENT OF BUILDINGS
Posted on
11/05/2026
- Full-time
Location
MANHATTAN
- No exam required
Department
Information Security
Save
Job Description
Cyber Technical Intelligence Analyst will perform critical functions within the Threat Management discipline by consuming and analyzing tactical and technical intel, as well as coordinating between New York City Cyber Command and Office of Technology & Innovation Info Sec.
Duties and Responsibilities include but not limited to the following:
- Provide intel support and directly assist or execute investigative efforts or tasks;
- Assist hunt missions to augment detection capabilities to identify threats across DOB’s IT operating environment;
- Responsible for the collection, processing, analysis, and dissemination of tactical intelligence (IOC’s) and products (finished reports)
- Develop, maintain, and execute threat and risk communication processes
- Perform network, system, and kill chain analysis on how malware was introduced and propagated;
- Conduct research for tracking certain code families, campaigns, or actors through technical analysis of data, malicious codes, and infrastructure;
- Employ predictive analytic methods to determine changes in adversary’s capabilities, motivations, and intent, while providing recommendations to reduce risk before exposure to threats occur;
- Characterize and analyze network traffic and server/cloud performance metrics to identify anomalous activity and potential threats;
- Resolve New York City Cyber Command’s Security Operations Center remediation requests
- Provide direct analytic support, threat hunting, detection engineering to the Security Operations Center, including Incident Response and Risk Analysts, to add context to active investigations and threats using intelligence;
- Follow up on incident reports and app scan reports to ensure that proper mitigation is taking place in timely manner;
- Investigate suspicious traffic and identify potential attacks, false positives, and missed detections
- Conduct network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls and host-based security systems; review and adjust ACL as needed based on source/destination/port by requirement;
- Conduct log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources;
- Correlate activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous or suspicious activity;
- Support the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results and making changes necessary to address deficiencies;
- Research emerging threats and vulnerabilities to aid in the identification of incidents;
- Provide users with incident response support, including mitigating actions to contain activity and facilitating forensic analysis when necessary;
- Design, implement, audit, and maintain ThreatLocker policies
- Manage ThreatLocker Application Whitelisting, Ringfencing, Storage Control, and Elevation Control
- Use scripting and automation tools, including PowerShell, Python, Power Automate, and Microsoft Graph API, to improve mobile service capabilities.
- Subject matter expert in mobile (MDM) architecture, device management, and security.
- Create and present custom threat briefing materials for tactical situational awareness;
- Handle special projects and initiatives as assigned.
REMOTE WORK
This position may be eligible for remote work up to 2 days per week, pursuant to the Remote Work Pilot Program.
To Apply:
Visit Jobs NYC (cityjobs.nyc.gov) to view and apply for available positions. Search by agency (Department of Buildings), keywords, or for the specific Job ID #.
NOTE: ONLY THOSE CANDIDATES UNDER CONSIDERATION WILL BE CONTACTED.
IT SECURITY SPECIALIST - 95622
Minimum Qualifications
A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,
Education and/or experience which is equivalent to "1" above.
Preferred Skills
The preferred candidate should possess the following: - Experience working in a security environment and/or supporting security teams from a technical standpoint - In-depth knowledge of the current cyber threat landscape, with a specific focus on the technical aspects of adversarial Tactics, Techniques and Procedures (TTPs) and their relation to the cyber kill chain and other analytical models - Fundamental analytic tradecraft skill sets, with extensive experience in the extraction and analysis of tactical intelligence from investigations - Lead complex cybersecurity incidents from identification through containment, eradication, recovery, and post-incident review. - Act as the primary escalation point for L1 and L2 to New York City Cyber Command’s Security Operations Center - Perform advanced threat hunting using Microsoft Defender XDR, Microsoft Sentinel, KQL, and other telemetry sources. - Conduct root cause analysis and recommend improvements to detection and response capabilities. - Produce clear incident reports, threat briefings, and stakeholder communications. - Support purple-team exercises, attack simulations, and MITRE ATT&CK-aligned threat modelling activities. - Detection Engineering & SOC Optimization - Support automation initiatives using Logic Apps, SOAR workflows, PowerShell, and other tooling where appropriate.
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.
Residency Requirement
New York City Residency is not required for this position
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
Save
Job ID
809789
Posted until
11/19/2026
Title code
95622
Civil service title
IT SECURITY SPECIALIST
Title classification
Non-Competitive-5
Business title
Cyber Technical Intelligence Analyst
- Experience level: Experienced (non-manager)
Job level
00
Number of positions
1
Work location
280 Broadway, 5th Floor, N.Y.
- Category: Technology, Data & Innovation
Cyber Technical Intelligence Analyst
See All 5 Remote Cyber Intelligence Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Cyber Intelligence Analyst Job Market
Who's Hiring
What Employers Look For
The qualifications that appear most often in remote cyber intelligence analyst jobs.
- Active TS/SCI security clearance, often with a polygraph requirement
- Experience with all-source or OSINT intelligence analysis and production
- Proficiency in MITRE ATT&CK framework and structured analytic techniques
- Bachelor's degree in intelligence studies, cybersecurity, or a related field
- Familiarity with cybersecurity tools such as SIEM platforms and threat intelligence feeds
- Strong written communication skills for producing finished intelligence products
Tips for Your Remote Cyber Intelligence Analyst Job Search
Apply early to remote roles that fit
Migrate Mate lists remote cyber intelligence analyst openings from across the U.S. in one place, so you can find roles that match your clearance level and skill set and apply directly without sorting through unrelated postings.
Show async analytical output upfront
Remote hiring managers want proof you produce intelligence products without real-time collaboration. Attach a sanitized finished intelligence report or OSINT summary to your application materials so your written analytical style speaks before the interview.
Highlight distributed workflow tools in your resume
Remote cyber intelligence teams run on platforms like Confluence, Jira, Slack, and shared threat intelligence platforms such as MISP or ThreatConnect. Name the specific tools you've used for collaborative remote analysis so your resume clears keyword screens for distributed security operations roles.
Prepare for remote technical screening formats
Many remote cyber intelligence analyst interviews include an async written exercise, a take-home threat assessment, or a live screen-share analysis session instead of a whiteboard. Practice producing a concise, source-cited intelligence estimate under time pressure to handle any of these formats confidently.
Remote Cyber Intelligence Analyst Jobs: Frequently Asked Questions
How do I get a remote cyber intelligence analyst job?
Remote cyber intelligence analyst roles go to candidates who can demonstrate independent judgment, rigorous written communication, and deep technical fluency without in-person oversight. Government contractors, managed security service providers, and financial institutions hire remotely, and they screen heavily for proficiency in threat intelligence platforms, OSINT tradecraft, and structured analytic techniques. A strong writing sample or sanitized intelligence product gives you a concrete edge over candidates who only list tools.
Which companies hire remote cyber intelligence analysts?
Remote cyber intelligence analyst roles are posted by Amentum, Macquarie, and CyberCube Analytics and others right now, based on current remote listings on Migrate Mate as of November 2026. The employers doing the most remote hiring in this role tend to be government contractors, cybersecurity consultancies, and large financial institutions running distributed security operations centers.
Can you get a remote cyber intelligence analyst job with no experience?
Yes, but remote entry-level roles are harder to land because employers expect you to operate independently from day one with minimal hand-holding. Smaller cybersecurity firms and commercial threat intelligence vendors are more open to junior remote candidates than large contractors. Demonstrating OSINT projects, contributing to open-source intelligence communities, or earning certifications like CompTIA Security+ or the SANS GIAC range can substitute for direct professional experience.
Do you need a degree for remote cyber intelligence analyst jobs?
Not always. Many remote employers in this field care more about demonstrable analytical output and technical skills than a specific credential. Intelligence community backgrounds, relevant certifications, and a portfolio of analytical work carry real weight. A degree in political science, computer science, or a related field helps, but remote teams often hire candidates who can show they produce accurate, well-structured intelligence products.
See All 5 Remote Cyber Intelligence Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs