Threat intelligence analyst with nearly 7 years of experience producing strategic and tactical intelligence for retail and financial organizations. Built a priority intelligence requirements program that turned feed noise into 40 actionable detections per quarter. Brings ransomware and fraud actor tracking, dark web research and concise executive briefings.
Experience
Threat Intelligence Analyst, Halsted Retail Group (Chicago, IL)
Apr 2022 – Present
Established priority intelligence requirements with 6 business units, focusing collection on ransomware and card-skimming groups
Converted intelligence into 40 detections per quarter in partnership with the detection team, mapped to MITRE ATT&CK
Operationalized MISP and Recorded Future feeds, cutting low-fidelity indicators reaching the SIEM by 65%
Brief executives monthly on threat landscape and supported 3 incident responses with actor attribution
Cyber Threat Analyst, Lakeshore Mutual Bank (Chicago, IL)
Feb 2020 – Mar 2022
Monitored dark web forums and Telegram channels, identifying 2 leaked credential sets before misuse
Wrote weekly threat bulletins distributed to 300 security and fraud staff
Education
M.S. Cybersecurity, DePaul University (Sep 2018 – Mar 2020)
B.A. Political Science, University of Illinois Urbana-Champaign (Aug 2014 – May 2018)
Skills
Intelligence Platforms: MISP, Recorded Future, ThreatConnect, VirusTotal
Research: OSINT, dark web monitoring, malware infrastructure pivoting
How to write a Threat Intelligence Analyst resume
A strong Threat Intelligence Analyst resume shows the systems you built, the scale they run at, and the measurable effect on speed, reliability or cost. Put your most relevant recent role first and make every bullet show a result, not a duty.
Sections, in order
Summary
Experience
Projects
Skills
Education
Length: One page for most candidates; move to two only if every line is relevant.
Summary: Write two or three lines: your role, your strongest skills, and one result that proves them.
Skills to feature
Programming languages
System design
Cloud platforms (AWS, GCP, Azure)
CI/CD
Testing and code review
Databases and SQL
Observability
Security fundamentals
APIs and integrations
Technical documentation
Example bullet points
Rebuilt the checkout service in Go, cutting p95 latency from 900 ms to 180 ms for 2M monthly users
Introduced contract tests and staged rollouts, reducing production incidents by 45% in two quarters
Migrated 30 services to Kubernetes with Terraform, lowering cloud spend by $250k a year
Tips from recruiters
Group skills by category (for example "Languages: Go, TypeScript") so recruiters and ATS parsers find them quickly.
Link to a repository, demo or write-up for at least one project you can talk about in depth.
Name the stack inside each bullet; keyword matching happens at the bullet level, not only in the skills list.
Recommended templates
Classic (ATS-friendly): Jake's-style LaTeX classic: small caps and hairline rules
Tech (ATS-friendly): Developer style: mono headings and tags, sans body
Modern (ATS-friendly): Clean single column with accent headings and rules
Threat Intelligence Analyst resume FAQ
What should a Threat Intelligence Analyst resume include?
A Threat Intelligence Analyst resume should show the systems you built, the scale they run at, and the measurable effect on speed, reliability or cost. Use these sections in this order: Summary, Experience, Projects, Skills and Education. Put your most relevant recent role first and make every bullet show a result, not a duty.
What is the best resume template for a Threat Intelligence Analyst?
Classic, Tech and Modern work well for Threat Intelligence Analyst roles. They are single-column with standard headings, so applicant tracking systems (ATS) parse them reliably.
How long should a Threat Intelligence Analyst resume be?
One page for most candidates; move to two only if every line is relevant.
Which skills should a Threat Intelligence Analyst put on a resume?
Prioritize the skills named in the job posting. Common ones for Threat Intelligence Analyst roles are Programming languages, System design, Cloud platforms (AWS, GCP, Azure), CI/CD, Testing and code review and Databases and SQL.
How do I write strong Threat Intelligence Analyst resume bullet points?
Start with an action verb, say what you did, and end with a measurable result such as latency, uptime and deploy frequency. For example: "Rebuilt the checkout service in Go, cutting p95 latency from 900 ms to 180 ms for 2M monthly users."