Cyber Security Analyst

Cyber Threat Analyst Industry: Global Restaurant and Hospitality Location: Plano, TX Work Arrangement: Hybrid — onsite 2 days per week Pay Rate: $51/hour Experience Level: 2–4 years Extension/Conversion: Potential based on performance A global restaurant and hospitality organization is seeking a Cyber Threat Analyst to support its Global Security Operations team. This position is focused on Cyber Threat Intelligence operations , not traditional threat hunting. The analyst will manage the day-to-day operation of the organization's threat intelligence platform, investigate suspicious activity, enrich security alerts, and produce actionable intelligence for technical teams and leadership. Responsibilities Manage and monitor the daily operations of the Recorded Future platform. Use Recorded Future for threat enrichment, investigations, threat-actor research, and intelligence reporting. Monitor and analyze alerts across SIEM, EDR, identity, network, and cloud-security platforms. Investigate suspicious activity and determine severity, scope, root cause, and business impact. Review and validate indicators of compromise. Correlate endpoint, network, identity, cloud, and vulnerability data. Determine whether alerts are legitimate threats or false positives. Escalate confirmed threats with clear evidence and documentation. Recommend containment, remediation, and risk-reduction actions. Produce weekly threat intelligence and operational reports. Present technical findings clearly to security teams and senior leadership. Support global vulnerability-management and security-operations initiatives. Maintain and improve intelligence workflows, dashboards, queries, and correlation rules. Collaborate with incident response, security engineering, threat hunting, and global security teams. Required Qualifications 2–4 years of experience in Cyber Threat Intelligence, Security Operations, Incident Response, or Cyber Threat Analysis. Hands-on experience with Recorded Future is required . Experience configuring, managing, or operationalizing Recorded Future. Experience with at least one SIEM platform: Microsoft Sentinel Splunk IBM QRadar Experience with at least one EDR platform: Cortex XDR Microsoft Defender CrowdStrike Carbon Black Understanding of the cyber threat intelligence lifecycle. Experience analyzing indicators of compromise and threat-actor activity. Experience triaging, investigating, and escalating cybersecurity alerts. Familiarity with MITRE ATT&CK and the cyber kill chain. Strong analytical, investigative, documentation, and communication skills. Ability to independently manage daily operational responsibilities. Must be local to the Plano area and available onsite 2 days per week. Preferred Qualifications Experience with Palo Alto Networks security products or Cortex XDR. Familiarity with Microsoft Entra ID, IAM, or identity-security tools. Basic cloud-security knowledge within AWS, Azure, or Google Cloud Platform. Experience maintaining SIEM queries, dashboards, detection rules, or correlation rules. Familiarity with KQL, Python, PowerShell, or SQL. Security+, GSEC, GCIH, or a similar cybersecurity certification. This is a high-visibility opportunity to help build and mature a global Cyber Threat Intelligence function. The position offers potential extension or conversion and a possible path into a Lead-level Cyber Threat Intelligence role. Interested candidates are encouraged to apply or message me directly with an updated resume.