Vulnerability Management Analyst → Threat Intelligence Analyst

A realistic transition from Vulnerability Management Analyst to Threat Intelligence Analyst: transferable skills, the gaps to close, a step-by-step learning plan and alternative routes. Estimated skill overlap 9%. Difficulty: Medium.

Difficulty: Medium6 stepsDuration: 9 to 13 monthsOverlap: 9%

Transition from Vulnerability Management Analyst to Threat Intelligence Analyst.

Transferable skills

  • Scripting (Python)

Skills to learn

  • Threat intelligence
  • MITRE ATT&CK & TTPs
  • OSINT
  • IOC management
  • Adversary tracking
  • SIEM

Step-by-step learning plan

  1. 1. Build on your Vulnerability Management Analyst experience

    2–4 weeks

    Leverage

    • Scripting (Python)

    Map transferable skills — Scripting (Python) — against what a Threat Intelligence Analyst needs.

  2. 2. Learn the core of the Threat Intelligence Analyst role

    6–10 weeks

    Learn

    • Threat intelligence
    • MITRE ATT&CK & TTPs
    • OSINT
    • IOC management

    Technologies

    MISPOpenCTIVirusTotal

    Cover the biggest gaps first: Threat intelligence, MITRE ATT&CK & TTPs, OSINT.

  3. 3. Master advanced Threat Intelligence Analyst skills

    6–10 weeks

    Learn

    • Briefing & writing
    • Adversary tracking
    • SIEM

    Technologies

    Microsoft SentinelSTIX/TAXIIShodan

    Handle the advanced topics: Briefing & writing, Adversary tracking, SIEM.

  4. 4. Get productive with the Threat Intelligence Analyst toolchain

    4–8 weeks

    Technologies

    MISPOpenCTIVirusTotalMicrosoft SentinelSTIX/TAXIIShodanWHOISSuricata

    Be hands-on with MISP, OpenCTI, VirusTotal and the rest of the target stack.

  5. 5. Practise Threat Intelligence Analyst work in real conditions

    4–8 weeks

    Ship a portfolio project or take on Threat Intelligence Analyst tasks at work.

  6. 6. Get certified and position yourself as a Threat Intelligence Analyst

    4–8 weeks

    Technologies

    GIAC GCTIRecorded Future CertifiedCompTIA CySA+MITRE ATT&CK Defender

    Update your CV and LinkedIn around Threat Intelligence Analyst, then apply to target roles.

Alternative routes