Cyber Threat Intelligence Analyst Jobs in USA with Visa Sponsorship
Cyber threat intelligence analyst roles attract strong H-1B visa sponsorship from defense contractors, financial institutions, and tech firms. Most positions require a bachelor's degree in cybersecurity, computer science, or a related field, and many employers also accept candidates with security clearances in lieu of advanced degrees. For detailed occupation requirements, see the O*NET profile.
Find Cyber Threat Intelligence Analyst JobsOverview
Showing 5 of 8,904+ Cyber Threat Intelligence Analyst jobs
See all 8,904+ Cyber Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Threat Intelligence Analyst roles.
Get Access To All JobsJob Description
Proactively identify cybersecurity incidents that may go undetected by other security tools. Respond to real-time security incidents and supports activities for response. Act as a liaison between the threat intelligence teams and the analyst teams to coordinate on emerging threats to the BHE networks.
Responsibilities
- Hunt for existing threats or vulnerabilities already present in the networks.
- Analyze and correlate large data sets to uncover threats and attack techniques. This may entail taking emerging or developing reports of attacks and building or adjusting queries as needed to ensure the protection of the environment.
- Coordinate with threat intelligence analysts on emerging threats to the company or industry, seeking out potential issues in the environment (40%).
- Assist endpoint and network protection SMEs in the development of protective or detective queries in existing tool sets that will allow for near real-time detection. When there is no threat immediately present, the potential for the threat in the future should be alerted on or blocked accordingly (30%).
- Advise on tools, techniques, or policies to advance the posture and monitoring functions of the security operations center. This also includes environments beyond the enterprise networks such as Industrial Control System (ICS) environments (10%).
- Provide timely and accurate cross-platform support in response to security threats (10%).
Qualifications
Bachelor’s degree in Computer Science, Information Technology, or related field; or equivalent work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree.)
- Direct experience performing threat hunting in an enterprise environment.
- Four or more years of experience in a technical role within a Security Operations Center, Incident Response Team, or Threat Intelligence for the threat hunter II.
- Six or more years of experience in a technical role within a Security Operations Center, Incident Response Team, or Threat Intelligence for the threat hunter III.
- Three years of hands-on experience with a production security toolset.
- Experience with an EDR/MDR/XDR, network tapping infrastructure, and security automation is preferred.
- Knowledge of security principles is desired through achievement and active pursuit of advanced security certification including CISM or CISSP or equivalent.
- Familiarity with at least one programming and scripting language such as PERL, Python, Ruby, C#, C++, Go, Rust, BASH, and Powershell, as well as open source security tools such as Syslog-NG, SNORT, Cuckoo, etc.
- Ability to construct and execute complex database queries using SQL (Structured Query Language), KQL (Kibana Query Language), or eDSL (Elasticsearch Domain Specific Language).
- General knowledge of information technology terms, equipment, systems, functions, and major vendors – Information Technology work experience strongly preferred (Server, endpoint, network, etc.).
- Effective interpersonal skills and customer relationship skills.
- Effective analytical, problem-solving and decision-making skills.
- Project management skills; ability to prioritize and handle multiple tasks and projects concurrently.
Employees must be able to perform the essential functions of the position, with or without an accommodation.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Position descriptions are developed as guides for the employees of MidAmerican Energy Company. The management team of MidAmerican Energy Company reserves the right to modify job responsibilities and position requirements to meet the corporate business goals and needs.
About us
MidAmerican Energy Company, a Midwest utility, provides regulated electric and natural gas service to more than 1.6 million customers in Illinois, Iowa, Nebraska and South Dakota. The company owns and operates a portfolio of power-generating assets, approximately 61% of which is wind generation.
About The Team
MidAmerican Energy Company is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law. Employees must be able to perform the essential functions of the position, with or without an accommodation.
Job Description
Proactively identify cybersecurity incidents that may go undetected by other security tools. Respond to real-time security incidents and supports activities for response. Act as a liaison between the threat intelligence teams and the analyst teams to coordinate on emerging threats to the BHE networks.
Responsibilities
- Hunt for existing threats or vulnerabilities already present in the networks.
- Analyze and correlate large data sets to uncover threats and attack techniques. This may entail taking emerging or developing reports of attacks and building or adjusting queries as needed to ensure the protection of the environment.
- Coordinate with threat intelligence analysts on emerging threats to the company or industry, seeking out potential issues in the environment (40%).
- Assist endpoint and network protection SMEs in the development of protective or detective queries in existing tool sets that will allow for near real-time detection. When there is no threat immediately present, the potential for the threat in the future should be alerted on or blocked accordingly (30%).
- Advise on tools, techniques, or policies to advance the posture and monitoring functions of the security operations center. This also includes environments beyond the enterprise networks such as Industrial Control System (ICS) environments (10%).
- Provide timely and accurate cross-platform support in response to security threats (10%).
Qualifications
Bachelor’s degree in Computer Science, Information Technology, or related field; or equivalent work experience. (Typically, four years of additional related, progressive work experience would be needed for candidates applying for this position who do not possess a bachelor’s degree.)
- Direct experience performing threat hunting in an enterprise environment.
- Four or more years of experience in a technical role within a Security Operations Center, Incident Response Team, or Threat Intelligence for the threat hunter II.
- Six or more years of experience in a technical role within a Security Operations Center, Incident Response Team, or Threat Intelligence for the threat hunter III.
- Three years of hands-on experience with a production security toolset.
- Experience with an EDR/MDR/XDR, network tapping infrastructure, and security automation is preferred.
- Knowledge of security principles is desired through achievement and active pursuit of advanced security certification including CISM or CISSP or equivalent.
- Familiarity with at least one programming and scripting language such as PERL, Python, Ruby, C#, C++, Go, Rust, BASH, and Powershell, as well as open source security tools such as Syslog-NG, SNORT, Cuckoo, etc.
- Ability to construct and execute complex database queries using SQL (Structured Query Language), KQL (Kibana Query Language), or eDSL (Elasticsearch Domain Specific Language).
- General knowledge of information technology terms, equipment, systems, functions, and major vendors – Information Technology work experience strongly preferred (Server, endpoint, network, etc.).
- Effective interpersonal skills and customer relationship skills.
- Effective analytical, problem-solving and decision-making skills.
- Project management skills; ability to prioritize and handle multiple tasks and projects concurrently.
Employees must be able to perform the essential functions of the position, with or without an accommodation.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Position descriptions are developed as guides for the employees of MidAmerican Energy Company. The management team of MidAmerican Energy Company reserves the right to modify job responsibilities and position requirements to meet the corporate business goals and needs.
About us
MidAmerican Energy Company, a Midwest utility, provides regulated electric and natural gas service to more than 1.6 million customers in Illinois, Iowa, Nebraska and South Dakota. The company owns and operates a portfolio of power-generating assets, approximately 61% of which is wind generation.
About The Team
MidAmerican Energy Company is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or religious creed, age, national origin, ancestry, citizenship status (except as required by law), gender (including gender identity and expression), sex (including pregnancy), sexual orientation, genetic information, physical or mental disability, veteran or military status, familial or parental status, marital status or any other category protected by applicable local, state or U.S. federal law. Employees must be able to perform the essential functions of the position, with or without an accommodation.
See all 8,904+ Cyber Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Cyber Threat Intelligence Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Cyber Threat Intelligence Analyst
Target employers with established security practices
Large defense contractors like Booz Allen Hamilton, Leidos, and Raytheon sponsor cyber threat intelligence analysts regularly. These firms have dedicated immigration teams and process H-1B petitions routinely, making sponsorship conversations more straightforward than with smaller employers.
Lead with certifications alongside your degree
Certifications like GIAC, CISSP, or CEH strengthen your specialty occupation case. USCIS scrutinizes cybersecurity roles, so pairing your degree with industry-recognized credentials signals that the position genuinely requires specialized expertise beyond general IT knowledge.
Clarify your clearance status early in conversations
Many cyber threat intelligence roles require a security clearance. If you hold an active or interim clearance, disclose it upfront. Clearance-eligible candidates are harder to replace, which gives employers a concrete business reason to commit to sponsorship costs.
Frame your specialty occupation clearly in your resume
USCIS requires that cyber roles demonstrate a specific degree requirement, not just general IT. Tailor your resume to reflect your specialization in threat analysis, intelligence tradecraft, or a specific domain like malware analysis or nation-state attribution work.
Approach cap-exempt employers for faster timelines
Universities, nonprofit research institutes, and government-affiliated labs often qualify as cap-exempt H-1B employers. These organizations hire cyber threat intelligence analysts and can file petitions outside the annual lottery, giving you a faster and more predictable path to work authorization.
Use Migrate Mate to find sponsors efficiently
Migrate Mate filters cyber threat intelligence analyst roles by verified sponsorship history, saving you from applying blindly. Concentrating your effort on employers who have sponsored similar roles before significantly improves your chances of an offer that includes visa support.
Frequently Asked Questions
Does a cyber threat intelligence analyst role qualify as a specialty occupation for H-1B purposes?
Yes, in most cases. USCIS evaluates whether the position normally requires a bachelor's degree or higher in a specific field. Cyber threat intelligence analyst roles tied to specific disciplines like computer science, information security, or intelligence studies generally qualify. Roles framed too broadly as general IT support can face scrutiny, so the job description must clearly articulate the specialized knowledge required.
What degree fields do employers typically accept for sponsored cyber threat intelligence analyst positions?
Most employers accept degrees in computer science, cybersecurity, information systems, or electrical engineering. Some defense-sector employers also consider degrees in political science or international relations when paired with technical certifications, particularly for roles focused on geopolitical threat attribution or nation-state actor analysis rather than purely technical malware work.
How competitive is H-1B sponsorship for cybersecurity roles compared to software engineering?
Cybersecurity roles face less competition than software engineering in the H-1B lottery because fewer petitions are filed in this category. However, many cyber threat intelligence positions require security clearances, which narrows the eligible candidate pool significantly. Non-U.S. citizens can obtain some clearance levels, but certain positions require U.S. citizenship, effectively limiting sponsorship opportunities at those employers.
Can I find cyber threat intelligence analyst roles that sponsor visas without going through the H-1B lottery?
Yes. Cap-exempt employers, including universities, federally funded research centers, and certain nonprofits, can sponsor H-1B visas outside the annual lottery. O-1A visas are another option for analysts with demonstrated expertise, such as published threat research or speaking engagements at major security conferences. Browse Migrate Mate to identify which employers in this field have active sponsorship histories.
Will a security clearance requirement block my visa sponsorship as a foreign national?
It depends on the clearance level. Secret and Top Secret clearances generally require U.S. citizenship, which disqualifies sponsored foreign nationals from those specific roles. However, many cyber threat intelligence positions require only a Public Trust determination or no clearance at all, particularly at commercial financial institutions, tech companies, and threat intelligence vendors. These are the most viable targets for visa sponsorship.
What is the prevailing wage requirement for sponsored Cyber Threat Intelligence Analyst jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.