Cybersecurity Analyst → Threat Intelligence Analyst

A realistic transition from Cybersecurity Analyst to Threat Intelligence Analyst: transferable skills, the gaps to close, a step-by-step learning plan and alternative routes. Estimated skill overlap 8%. Difficulty: Medium.

Difficulty: Medium7 stepsDuration: 9 to 13 monthsOverlap: 8%

Transition from Cybersecurity Analyst to Threat Intelligence Analyst.

Skills to learn

  • Threat intelligence
  • MITRE ATT&CK & TTPs
  • OSINT
  • IOC management
  • Adversary tracking
  • SIEM

Step-by-step learning plan

  1. 1. Build on your Cybersecurity Analyst experience

    2–4 weeks

    Map your current strengths against the Threat Intelligence Analyst role.

  2. 2. Close the partial gaps toward Threat Intelligence Analyst

    3–6 weeks

    Improve

    • Scripting (Python)

    Raise Scripting (Python) to the level a Threat Intelligence Analyst relies on.

  3. 3. Learn the core of the Threat Intelligence Analyst role

    6–10 weeks

    Learn

    • Threat intelligence
    • MITRE ATT&CK & TTPs
    • OSINT
    • IOC management

    Technologies

    MISPOpenCTIVirusTotal

    Cover the biggest gaps first: Threat intelligence, MITRE ATT&CK & TTPs, OSINT.

  4. 4. Master advanced Threat Intelligence Analyst skills

    6–10 weeks

    Learn

    • Briefing & writing
    • Adversary tracking
    • SIEM

    Technologies

    STIX/TAXIIShodanWHOIS

    Handle the advanced topics: Briefing & writing, Adversary tracking, SIEM.

  5. 5. Get productive with the Threat Intelligence Analyst toolchain

    4–8 weeks

    Technologies

    MISPOpenCTIVirusTotalSTIX/TAXIIShodanWHOISSuricataZeek

    Be hands-on with MISP, OpenCTI, VirusTotal and the rest of the target stack.

  6. 6. Practise Threat Intelligence Analyst work in real conditions

    4–8 weeks

    Ship a portfolio project or take on Threat Intelligence Analyst tasks at work.

  7. 7. Get certified and position yourself as a Threat Intelligence Analyst

    4–8 weeks

    Technologies

    GIAC GCTIRecorded Future CertifiedCompTIA CySA+MITRE ATT&CK Defender

    Update your CV and LinkedIn around Threat Intelligence Analyst, then apply to target roles.

Alternative routes