Cyber Threat Intelligence Analyst Jobs in USA with Visa Sponsorship
Cyber threat intelligence analyst roles attract strong H-1B visa sponsorship from defense contractors, financial institutions, and tech firms. Most positions require a bachelor's degree in cybersecurity, computer science, or a related field, and many employers also accept candidates with security clearances in lieu of advanced degrees. For detailed occupation requirements, see the O*NET profile.
Find Cyber Threat Intelligence Analyst JobsOverview
Showing 5 of 8,098+ Cyber Threat Intelligence Analyst jobs
See all 8,098+ Cyber Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Threat Intelligence Analyst roles.
Get Access To All JobsResponsibilities
About the Team
The USDS FUSE Intelligence program is an all-hazards team that develops products and services with action-based outcomes to reduce and identify risk to TikTok USDS JV. As a Cyber Threat Intelligence Analyst, the candidate will be responsible for managing the triage, escalation, and reporting of threats against our US business and users that emanate from multiple sources, including internal, external and the deep and dark web.
About the Role
The candidate will effectively fuse their knowledge of the general threat landscape, the USDS business, and cyber threat intelligence sources to generate data driven, action oriented intelligence for stakeholders. The candidate will possess strong skills in research and investigative techniques to develop tailored cyber threat intelligence products. Strong candidates will also possess threat hunting and AI enabled investigations and development skills. This role will require close collaboration with internal Cyber, Financial Crimes, Payments, Legal, other USDS security teams, and various business departments. The candidate must also demonstrate strong intelligence writing and communication skills, contribute to cross-functional teams on a global scale, engage in response actions across various security disciplines, excel in a fast-paced and ambiguous work environment, and share pertinent information as needed to support the company's critical business, market strategy, and operational infrastructure requirements. Additionally, as a Cyber Threat Intelligence Analyst, the candidate must be able to effectively monitor a variety of tools including SIEM, case management, premium intelligence, OSINT, and social media/ dark web intelligence sources to perform alert review, triage and escalations. The candidate should be able to enhance processes by obtaining a high level of proficiency with collection platforms, tuning alerts, and automating tasks. The candidate must also be able to create and develop threat intelligence reports which outline findings and risk to business stakeholders.
Responsibilities:
- Key contributor to threat intelligence monitoring, alert triage, escalation, and monthly reporting
- Maintain and tune data flows within a Threat Intelligence Monitoring Platform
- Develop automations to enhance intelligence collection and processing including use of AI/LLM enhancements where appropriate or possible
- Identify and further develop current intelligence sources, collection requirements, and reporting processes
- Provide timely escalations and reports with recommended mitigation strategies for business partners
- Contribute CTI intelligence resources to interdisciplinary intelligence reporting, including cyber threat intelligence, converged risk, protective intelligence, criminal intelligence, and influence operations discovery.
Qualifications
Minimum Qualifications
- Bachelor’s degree (or equivalent) in Cybersecurity, information security, privacy, risk, compliance, project management or like discipline from an accredited college or university or measurable knowledge / experience from proven industry, military, defense, or government operations.
- Experience with cyber threat intelligence or threat monitoring, in a security or intelligence role within a global enterprise or intelligence vendor
- Understanding of basic CTI team operations in conjunction with a SOC, Incident Response team, Red Team, Threat Hunting, Threat Detection, or other core CTI stakeholders.
- Firm grasp of CTI analytic methodologies, tooling, and approaches to conducting threat actor analysis, TTP assessments, and contributing to detection engineering processes.
- Experience authoring intelligence products, having a clear grasp of the intelligence lifecycle, and ability to integrate intelligence into security workflows.
- Familiarity with using AI for triage, research or automation.
- Ability to leverage well-honed research expertise for all-source monitoring, to include social-media and dark web sources.
Preferred Qualifications
- Familiarity with SQL and any one general purpose language for developing automation.
- Understanding or experience working with log sources from various sources, security devices, web applications and infrastructure.
- Experience with threat hunting techniques and methodologies.
- Excellent communication skills along with teamwork and collaboration abilities on global and multi-functional teams with different intelligence source groups. Experience creating and disseminating reports to multi-level audiences in a technical environment
- Knowledge of cyber intelligence data sources and platforms while demonstrating time management and prioritization skills. Highly motivated to contribute and grow within a complex area of emerging importance in an enterprise environment
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy – a mission we work towards every day. We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
【For Pay Transparency】 Compensation Description (Annually)
- Washington, DC The base salary range for this position in the selected city is $106920 - $242820 annually.
Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
Responsibilities
About the Team
The USDS FUSE Intelligence program is an all-hazards team that develops products and services with action-based outcomes to reduce and identify risk to TikTok USDS JV. As a Cyber Threat Intelligence Analyst, the candidate will be responsible for managing the triage, escalation, and reporting of threats against our US business and users that emanate from multiple sources, including internal, external and the deep and dark web.
About the Role
The candidate will effectively fuse their knowledge of the general threat landscape, the USDS business, and cyber threat intelligence sources to generate data driven, action oriented intelligence for stakeholders. The candidate will possess strong skills in research and investigative techniques to develop tailored cyber threat intelligence products. Strong candidates will also possess threat hunting and AI enabled investigations and development skills. This role will require close collaboration with internal Cyber, Financial Crimes, Payments, Legal, other USDS security teams, and various business departments. The candidate must also demonstrate strong intelligence writing and communication skills, contribute to cross-functional teams on a global scale, engage in response actions across various security disciplines, excel in a fast-paced and ambiguous work environment, and share pertinent information as needed to support the company's critical business, market strategy, and operational infrastructure requirements. Additionally, as a Cyber Threat Intelligence Analyst, the candidate must be able to effectively monitor a variety of tools including SIEM, case management, premium intelligence, OSINT, and social media/ dark web intelligence sources to perform alert review, triage and escalations. The candidate should be able to enhance processes by obtaining a high level of proficiency with collection platforms, tuning alerts, and automating tasks. The candidate must also be able to create and develop threat intelligence reports which outline findings and risk to business stakeholders.
Responsibilities:
- Key contributor to threat intelligence monitoring, alert triage, escalation, and monthly reporting
- Maintain and tune data flows within a Threat Intelligence Monitoring Platform
- Develop automations to enhance intelligence collection and processing including use of AI/LLM enhancements where appropriate or possible
- Identify and further develop current intelligence sources, collection requirements, and reporting processes
- Provide timely escalations and reports with recommended mitigation strategies for business partners
- Contribute CTI intelligence resources to interdisciplinary intelligence reporting, including cyber threat intelligence, converged risk, protective intelligence, criminal intelligence, and influence operations discovery.
Qualifications
Minimum Qualifications
- Bachelor’s degree (or equivalent) in Cybersecurity, information security, privacy, risk, compliance, project management or like discipline from an accredited college or university or measurable knowledge / experience from proven industry, military, defense, or government operations.
- Experience with cyber threat intelligence or threat monitoring, in a security or intelligence role within a global enterprise or intelligence vendor
- Understanding of basic CTI team operations in conjunction with a SOC, Incident Response team, Red Team, Threat Hunting, Threat Detection, or other core CTI stakeholders.
- Firm grasp of CTI analytic methodologies, tooling, and approaches to conducting threat actor analysis, TTP assessments, and contributing to detection engineering processes.
- Experience authoring intelligence products, having a clear grasp of the intelligence lifecycle, and ability to integrate intelligence into security workflows.
- Familiarity with using AI for triage, research or automation.
- Ability to leverage well-honed research expertise for all-source monitoring, to include social-media and dark web sources.
Preferred Qualifications
- Familiarity with SQL and any one general purpose language for developing automation.
- Understanding or experience working with log sources from various sources, security devices, web applications and infrastructure.
- Experience with threat hunting techniques and methodologies.
- Excellent communication skills along with teamwork and collaboration abilities on global and multi-functional teams with different intelligence source groups. Experience creating and disseminating reports to multi-level audiences in a technical environment
- Knowledge of cyber intelligence data sources and platforms while demonstrating time management and prioritization skills. Highly motivated to contribute and grow within a complex area of emerging importance in an enterprise environment
About USDS
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.
On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.
Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy – a mission we work towards every day. We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
USDS Reasonable Accommodation
USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA
Job Information
【For Pay Transparency】 Compensation Description (Annually)
- Washington, DC The base salary range for this position in the selected city is $106920 - $242820 annually.
Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.
Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).
The Company reserves the right to modify or change these benefits programs at any time, with or without notice.
See all 8,098+ Cyber Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Threat Intelligence Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Cyber Threat Intelligence Analyst
Target employers with established security practices
Large defense contractors like Booz Allen Hamilton, Leidos, and Raytheon sponsor cyber threat intelligence analysts regularly. These firms have dedicated immigration teams and process H-1B petitions routinely, making sponsorship conversations more straightforward than with smaller employers.
Lead with certifications alongside your degree
Certifications like GIAC, CISSP, or CEH strengthen your specialty occupation case. USCIS scrutinizes cybersecurity roles, so pairing your degree with industry-recognized credentials signals that the position genuinely requires specialized expertise beyond general IT knowledge.
Clarify your clearance status early in conversations
Many cyber threat intelligence roles require a security clearance. If you hold an active or interim clearance, disclose it upfront. Clearance-eligible candidates are harder to replace, which gives employers a concrete business reason to commit to sponsorship costs.
Frame your specialty occupation clearly in your resume
USCIS requires that cyber roles demonstrate a specific degree requirement, not just general IT. Tailor your resume to reflect your specialization in threat analysis, intelligence tradecraft, or a specific domain like malware analysis or nation-state attribution work.
Approach cap-exempt employers for faster timelines
Universities, nonprofit research institutes, and government-affiliated labs often qualify as cap-exempt H-1B employers. These organizations hire cyber threat intelligence analysts and can file petitions outside the annual lottery, giving you a faster and more predictable path to work authorization.
Use Migrate Mate to find sponsors efficiently
Migrate Mate filters cyber threat intelligence analyst roles by verified sponsorship history, saving you from applying blindly. Concentrating your effort on employers who have sponsored similar roles before significantly improves your chances of an offer that includes visa support.
Frequently Asked Questions
Does a cyber threat intelligence analyst role qualify as a specialty occupation for H-1B purposes?
Yes, in most cases. USCIS evaluates whether the position normally requires a bachelor's degree or higher in a specific field. Cyber threat intelligence analyst roles tied to specific disciplines like computer science, information security, or intelligence studies generally qualify. Roles framed too broadly as general IT support can face scrutiny, so the job description must clearly articulate the specialized knowledge required.
What degree fields do employers typically accept for sponsored cyber threat intelligence analyst positions?
Most employers accept degrees in computer science, cybersecurity, information systems, or electrical engineering. Some defense-sector employers also consider degrees in political science or international relations when paired with technical certifications, particularly for roles focused on geopolitical threat attribution or nation-state actor analysis rather than purely technical malware work.
How competitive is H-1B sponsorship for cybersecurity roles compared to software engineering?
Cybersecurity roles face less competition than software engineering in the H-1B lottery because fewer petitions are filed in this category. However, many cyber threat intelligence positions require security clearances, which narrows the eligible candidate pool significantly. Non-U.S. citizens can obtain some clearance levels, but certain positions require U.S. citizenship, effectively limiting sponsorship opportunities at those employers.
Can I find cyber threat intelligence analyst roles that sponsor visas without going through the H-1B lottery?
Yes. Cap-exempt employers, including universities, federally funded research centers, and certain nonprofits, can sponsor H-1B visas outside the annual lottery. O-1A visas are another option for analysts with demonstrated expertise, such as published threat research or speaking engagements at major security conferences. Browse Migrate Mate to identify which employers in this field have active sponsorship histories.
Will a security clearance requirement block my visa sponsorship as a foreign national?
It depends on the clearance level. Secret and Top Secret clearances generally require U.S. citizenship, which disqualifies sponsored foreign nationals from those specific roles. However, many cyber threat intelligence positions require only a Public Trust determination or no clearance at all, particularly at commercial financial institutions, tech companies, and threat intelligence vendors. These are the most viable targets for visa sponsorship.
What is the prevailing wage requirement for sponsored Cyber Threat Intelligence Analyst jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.