Embedded Threat Intelligence Analyst

• Compensation: USD 126,000 - USD 158,000 - yearly

About Sibylline

Sibylline is the world's largest private intelligence firm, helping organisations manage risk, spot opportunity, and build resilience in an increasingly volatile world.

Our people provide the insight that leaders need to navigate today's complex geopolitical landscape. It's meaningful work, with high-profile clients and real-world stakes – and that's what makes it so rewarding.

We're innovative, entrepreneurial, and growing fast, which means genuine opportunities to take on complex challenges, work with cutting-edge technology, and build your career, whatever stage you're at.

Everyone brings something different to the table, and we want that reflected in how we operate. Our roles suit a wide range of working styles, personalities, and interests, and we invest heavily in our managers so that every person gets the support they need to do their best work.

We're looking for people who are ambitious, discreet, and sharp, with strong integrity and a genuine curiosity about the world. If you're comfortable with uncertainty, energised by complex problems, and passionate about global affairs, we'd love to hear from you.

Sibylline is seeking a highly motivated and analytical Threat Intelligence Analyst to support a client's global security and risk management functions. Embedded within the client environment, the Threat Intelligence Analyst will identify, investigate, assess, and communicate threats and emerging risks impacting personnel, operations, assets, facilities, and brand reputation.

The successful candidate will possess a strong understanding of intelligence analysis, investigative methodologies, threat actor research, and open-source intelligence (OSINT) collection. This role requires the ability to transform complex information into actionable intelligence that enables decision-makers to mitigate risk, enhance security operations, and support informed security and business decisions.

The Threat Intelligence Analyst will work closely with stakeholders across corporate security, physical security, investigations, and business operations teams to deliver timely intelligence products, investigative findings, and operational support.

Location:
San Francisco, CA with in-office requirements of at least two days a week. The team will work Monday to Friday, 8am-5pm.

Essential Functions / Responsibilities

Monitor, collect, and analyze information from a variety of sources to identify threats, risks, and emerging trends impacting personnel, operations, assets, facilities, and brand reputation.

Conduct online investigations and assess threat actors, online communities, suspicious activity, and emerging risks relevant to corporate and physical security operations.

Produce timely intelligence products, investigative reports, alerts, and briefings to support decision-making and risk mitigation efforts.

Leverage OSINT methodologies, social media analysis, public records research, and commercial intelligence platforms to support intelligence collection and investigative activities.

Develop investigative leads, conduct due diligence and attribution research, and synthesize findings from disparate information sources into actionable intelligence.

Triage and respond to requests for intelligence and investigative support, delivering timely and relevant insights to stakeholders.

Support critical incident response efforts through rapid research, analysis, and dissemination of relevant information.

Maintain intelligence records, analytical databases, and case management systems to support ongoing operations.

Collaborate with cross-functional stakeholders to enhance threat identification, risk mitigation, and security…