Threat Hunter → Threat Intelligence Analyst

A realistic transition from Threat Hunter to Threat Intelligence Analyst: transferable skills, the gaps to close, a step-by-step learning plan and alternative routes. Estimated skill overlap 38%. Difficulty: Easy.

Difficulty: Easy6 stepsDuration: 4 to 8 monthsOverlap: 38%

Transition from Threat Hunter to Threat Intelligence Analyst.

Transferable skills

  • Threat intelligence
  • MITRE ATT&CK & TTPs
  • Scripting (Python)

Skills to learn

  • OSINT
  • IOC management
  • Adversary tracking
  • SIEM
  • Briefing & writing

Step-by-step learning plan

  1. 1. Build on your Threat Hunter experience

    2–4 weeks

    Leverage

    • Threat intelligence
    • MITRE ATT&CK & TTPs
    • Scripting (Python)

    Map transferable skills — Threat intelligence, MITRE ATT&CK & TTPs, Scripting (Python) — against what a Threat Intelligence Analyst needs.

  2. 2. Learn the core of the Threat Intelligence Analyst role

    6–10 weeks

    Learn

    • OSINT
    • IOC management
    • Briefing & writing

    Technologies

    MISPOpenCTIVirusTotal

    Cover the biggest gaps first: OSINT, IOC management, Briefing & writing.

  3. 3. Master advanced Threat Intelligence Analyst skills

    6–10 weeks

    Learn

    • Adversary tracking
    • SIEM

    Technologies

    STIX/TAXIIShodanWHOIS

    Handle the advanced topics: Adversary tracking, SIEM.

  4. 4. Get productive with the Threat Intelligence Analyst toolchain

    4–8 weeks

    Technologies

    MISPOpenCTIVirusTotalSTIX/TAXIIShodanWHOIS

    Be hands-on with MISP, OpenCTI, VirusTotal and the rest of the target stack.

  5. 5. Practise Threat Intelligence Analyst work in real conditions

    4–8 weeks

    Ship a portfolio project or take on Threat Intelligence Analyst tasks at work.

  6. 6. Get certified and position yourself as a Threat Intelligence Analyst

    4–8 weeks

    Technologies

    GIAC GCTIRecorded Future CertifiedCompTIA CySA+MITRE ATT&CK Defender

    Update your CV and LinkedIn around Threat Intelligence Analyst, then apply to target roles.

Alternative routes