Incident Response (CSIRT) - Aalborg, København, Stockholm

Threat Intelligence Analyst

Join our mission towards a safe digital future

Apply for this job

Do you want to be at the forefront of protecting our society against cyber threats? We are looking for a Threat Intelligence Analyst to team up with the most dedicated team of cyber specialists in our Intelligence domain.

About Truesec – A Leading Cybersecurity Company

Since 2005, Truesec has been a native cybersecurity company, driven by one single purpose: Creating safety and sustainability in a digital world by preventing cyber breach and minimizing impact. 

Over the years, we’ve earned the trust of organizations worldwide and gained a strong reputation internationally. Our team consists of dedicated specialists covering the entire spectrum of cybersecurity – with capabilities in Predict, Prevent, Protect, Respond, and Recover. 

Today, we employ around 400 employees – and as cybercrime grows, we need to grow. To support that goal, we are now looking for a Threat Intelligence Analyst who wants to make a difference in our Intelligence team.

CSIRT (Cybersecurity Incident Response Team)

Our Cybersecurity Incident Response Team (CSIRT) manages most of the large cybersecurity incidents in Sweden and worldwide. The team includes experts in forensics, advanced infrastructure, incident management, and a dedicated Intelligence capability delivering technical and non-technical intelligence to support internal needs and external customers, helping organizations recover with minimal impact.

The Role

As a Threat Intelligence Analyst at Truesec, you will be part of our Cyber & Threat Intelligence Team nested in The Intelligence Services. You will specialize in monitoring, evaluating, analyzing, and reporting on threat actors and geopolitical developments impacting the cyber threat landscape. Your insights will directly strengthen our clients’ security posture and resilience as well as building on the Truesec knowledge base.

Key Responsibilities

  • Threat Actor Analysis: Monitor, identify, and profile cyber threat actors, including their TTPs, motivations, and supporting infrastructure.

  • Geopolitical Intelligence: Track geopolitical developments—such as conflicts, regulatory changes, and nation‑state activity—and assess their impact on Truesec and our clients.

  • Incident Support: Deliver timely intelligence to Truesec’s Incident Response and SOC teams during and after incidents, including attribution and threat actor tracking.

  • Reporting & Communication: Produce clear, actionable intelligence reports and assessments, and present insights to both technical and non‑technical audiences.

  • Collaboration: Work closely across Truesec to ensure intelligence is effectively integrated into detection, response, and strategic advisory services.

  • Continuous Improvement: Actively contribute to the evolution of Truesec’s threat intelligence capabilities, methodologies, and technology stack.

Your Potential Background

The ideal candidate brings proven experience in threat intelligence analysis from a cybersecurity, intelligence, or similarly mission‑critical environment. You have a deep understanding of threat actors across the spectrum—including criminal groups, hacktivists, and nation‑state actors—and how these adversaries plan, operate, and continuously evolve. You also possess a strong grasp of geopolitical dynamics and can translate global events into relevant, timely cyber threat insights.

Working in the field, you are comfortable working with threat intelligence platforms, OSINT methodologies, and dark web monitoring tools, and you apply strong analytical and critical‑thinking skills to everything you do. You can synthesize large volumes of complex information and communicate it with clarity and precision, delivering concise, actionable intelligence that supports both strategic decision‑making and effective operational defense.

Qualifications:

  • Bachelor’s or Master’s degree in Cybersecurity, Political Science, International Relations, or related field.

  • Relevant certifications (e.g., GCTI, CTIA, SANS, etc.) are advantageous.

  • Experience working with law enforcement, government, or military intelligence is a merit.

  • Fluency in Danish/Swedish and English (additional languages, especially relevant to priority regions, are a plus).

Due to the sensitivity in our assignments, we require Swedish or Danish citizenship, citizenship in an EU country, or a Swedish/Danish work permit.

Join Our Mission Toward a Safe Digital Future

If you truly want to make a difference and make our world a little bit safer, this is the place for you. At Truesec, you’ll get to be at the forefront of fighting cybercrime instead of reading about it in the news. This is your chance to be part of an exciting journey in a leading cybersecurity company – and learn from some of the best in their field.

So, are you ready to team up with the most dedicated team of experts and be part of a meaningful mission? Then we are excited to get to know you!

Apply for this job