Threat Intelligence Analyst Jobs in USA with Visa Sponsorship
Threat Intelligence Analysts are in high demand across financial services, defense contractors, and tech firms, most of which sponsor H-1B visas. The role typically qualifies as a specialty occupation, requiring a bachelor's degree in cybersecurity, computer science, or a related field. For detailed occupation requirements, see the O*NET profile.
Find Threat Intelligence Analyst JobsOverview
Showing 5 of 8,884+ Threat Intelligence Analyst jobs
See all 8,884+ Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Threat Intelligence Analyst roles.
Get Access To All JobsINTRODUCTION
The Threat Detection Engineer will develop and enhance enterprise threat detection capabilities across security monitoring platforms. This role will focus on creating advanced detection logic, threat hunting, incident identification, security analytics, and monitoring of both traditional and AI-enabled environments. The engineer will work closely with SOC, cyber defense, and threat intelligence teams to improve detection coverage and reduce organizational cyber risk.
ROLE AND RESPONSIBILITIES
Key Responsibilities:
- Develop and tune SIEM detection use cases and correlation rules.
- Perform proactive threat hunting and behavioral analytics.
- Create and maintain security monitoring content.
- Investigate emerging threats and map detections to MITRE ATT&CK.
- Improve detection coverage for cloud, endpoint, and network environments.
- Build automated response workflows and security analytics dashboards.
- Support detection strategies for AI, GenAI, and LLM-based technologies.
AI / Agentic Systems Development
- Design and implement agentic workflows (ReAct, multi-agent orchestration, tool-augmented agents).
- Build autonomous or semi-autonomous AI agents to handle development, testing, and operational workflows.
- Integrate agents with enterprise systems (Jira, Git, ServiceNow, APIs, etc.).
RAG & Knowledge:
- Build and optimize Retrieval-Augmented Generation (RAG) pipelines.
- Work with vector databases, embeddings, document chunking, indexing, retrieval tuning.
- Enable enterprise knowledge use cases (e.g., FAQ bots, nuggets/knowledge artifacts, AI copilots).
Implement evaluation frameworks for LLMs:
- Functional correctness.
- Response quality.
- Hallucination detection.
- Experience with AI testing frameworks (e.g., RAGAS, DeepEval, custom evaluation harnesses).
- Build scalable APIs/services (FastAPI, Flask, etc.).
- Ensure performance, observability, and reliability of AI systems.
BASIC QUALIFICATIONS
Primary Skills:
- Threat Detection Engineering (SIEM/EDR).
- Splunk & Security Analytics.
- Threat Hunting & Incident Response.
Secondary Skills:
- Security Automation (SOAR).
- AI Security & GenAI Monitoring.
Experience:
- 7+ years of cybersecurity and security operations experience.
- Hands-on experience with Splunk, Sentinel, QRadar, or similar SIEM tools.
- Experience building detection content and threat-hunting methodologies.
- Familiarity with cloud security, EDR technologies, and MITRE ATT&CK framework.
COMPENSATION
- The pay range that the employer in good faith reasonably expects to pay for this position is $49.93/hour - $78.01/hour.
Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.
LOCATION
New York, NY, United States (On-site)
JOB TYPE
Contract (2 months 27 days)
INTRODUCTION
The Threat Detection Engineer will develop and enhance enterprise threat detection capabilities across security monitoring platforms. This role will focus on creating advanced detection logic, threat hunting, incident identification, security analytics, and monitoring of both traditional and AI-enabled environments. The engineer will work closely with SOC, cyber defense, and threat intelligence teams to improve detection coverage and reduce organizational cyber risk.
ROLE AND RESPONSIBILITIES
Key Responsibilities:
- Develop and tune SIEM detection use cases and correlation rules.
- Perform proactive threat hunting and behavioral analytics.
- Create and maintain security monitoring content.
- Investigate emerging threats and map detections to MITRE ATT&CK.
- Improve detection coverage for cloud, endpoint, and network environments.
- Build automated response workflows and security analytics dashboards.
- Support detection strategies for AI, GenAI, and LLM-based technologies.
AI / Agentic Systems Development
- Design and implement agentic workflows (ReAct, multi-agent orchestration, tool-augmented agents).
- Build autonomous or semi-autonomous AI agents to handle development, testing, and operational workflows.
- Integrate agents with enterprise systems (Jira, Git, ServiceNow, APIs, etc.).
RAG & Knowledge:
- Build and optimize Retrieval-Augmented Generation (RAG) pipelines.
- Work with vector databases, embeddings, document chunking, indexing, retrieval tuning.
- Enable enterprise knowledge use cases (e.g., FAQ bots, nuggets/knowledge artifacts, AI copilots).
Implement evaluation frameworks for LLMs:
- Functional correctness.
- Response quality.
- Hallucination detection.
- Experience with AI testing frameworks (e.g., RAGAS, DeepEval, custom evaluation harnesses).
- Build scalable APIs/services (FastAPI, Flask, etc.).
- Ensure performance, observability, and reliability of AI systems.
BASIC QUALIFICATIONS
Primary Skills:
- Threat Detection Engineering (SIEM/EDR).
- Splunk & Security Analytics.
- Threat Hunting & Incident Response.
Secondary Skills:
- Security Automation (SOAR).
- AI Security & GenAI Monitoring.
Experience:
- 7+ years of cybersecurity and security operations experience.
- Hands-on experience with Splunk, Sentinel, QRadar, or similar SIEM tools.
- Experience building detection content and threat-hunting methodologies.
- Familiarity with cloud security, EDR technologies, and MITRE ATT&CK framework.
COMPENSATION
- The pay range that the employer in good faith reasonably expects to pay for this position is $49.93/hour - $78.01/hour.
Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.
Tundra Technical Solutions is among North America’s leading providers of Staffing and Consulting Services. Our success and our clients’ success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.
LOCATION
New York, NY, United States (On-site)
JOB TYPE
Contract (2 months 27 days)
See all 8,884+ Threat Intelligence Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Threat Intelligence Analyst roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Threat Intelligence Analyst
Target industries with established sponsorship pipelines
Defense contractors, financial institutions, and large tech firms sponsor Threat Intelligence Analysts at high rates. These employers have dedicated immigration counsel and process H-1B petitions routinely, making sponsorship conversations significantly more straightforward than at smaller companies.
Align your degree to the role before applying
USCIS requires a direct connection between your degree field and the job duties. A cybersecurity, computer science, or information systems degree maps cleanly. A general business degree paired with unrelated work history will create complications during the specialty occupation review.
Highlight security clearance eligibility early
Many Threat Intelligence roles, especially with defense contractors and federal agencies, require security clearance. Candidates who can begin the clearance process hold a genuine edge, and employers are more likely to invest in sponsorship when clearance eligibility is already established.
Document your technical specialization concretely
USCIS scrutinizes whether the role truly requires a specific degree. Documenting expertise in specific threat frameworks like MITRE ATT&CK, malware analysis, or APT tracking reinforces that your position demands specialized academic training, not generalist IT knowledge.
Understand the H-1B cap and cap-exempt employers
Most private-sector employers are subject to the annual H-1B lottery. Universities, nonprofit research institutions, and government-affiliated organizations are cap-exempt, meaning they can file year-round. If lottery timing is a concern, cap-exempt employers are worth prioritizing in your search.
Use Migrate Mate to find employers who actively sponsor
Not every company that posts a Threat Intelligence Analyst role will sponsor visas. Migrate Mate filters specifically for sponsoring employers, saving you from applying to roles where visa support was never on the table and the conversation ends before it starts.
Frequently Asked Questions
Does a Threat Intelligence Analyst role qualify as a specialty occupation for H-1B purposes?
Yes, in most cases. USCIS looks for roles that normally require a bachelor's degree in a specific field. Threat Intelligence Analysts typically require degrees in cybersecurity, computer science, or information systems. Employers should ensure job descriptions specify the required degree field rather than listing it as preferred, since that distinction matters significantly during adjudication.
Which visa types are most commonly used to sponsor Threat Intelligence Analysts?
The H-1B is by far the most common pathway. Analysts with extraordinary recognition in the field may qualify for the O-1A. Canadians and Mexicans may qualify under the TN visa in the Systems Analyst category. Australians may be eligible for the E-3 visa. The right visa depends on your nationality, qualifications, and employer type.
How can I find Threat Intelligence Analyst jobs that actually offer visa sponsorship?
Most general job boards don't filter by sponsorship status, so you waste time applying to roles where sponsorship was never available. Migrate Mate is built specifically for this, every listing is from an employer willing to sponsor. Browse Threat Intelligence Analyst roles there to focus your efforts on companies already open to supporting your visa.
Do I need a security clearance to get sponsored as a Threat Intelligence Analyst?
Not always, but it depends heavily on the employer. Private-sector companies in financial services or tech rarely require clearance upfront. Defense contractors and roles supporting federal agencies almost always do. Clearance eligibility, rather than active clearance, is often sufficient for sponsorship consideration, and the employer typically initiates the clearance process after hiring.
What happens to my visa sponsorship if I want to change employers after my H-1B is approved?
Your H-1B is employer-specific, so changing jobs requires your new employer to file an H-1B transfer petition before you start. You can begin working for the new employer once the transfer petition is filed and a receipt notice is issued, without waiting for full approval. H-1B portability rules protect your status during the transfer period as long as your previous petition was properly maintained.
What is the prevailing wage requirement for sponsored Threat Intelligence Analyst jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.