CCAIRHow to become a Threat Intelligence Analyst
Threat intelligence analysts research criminal and state-backed hacking groups: who they target, how they operate and what they are likely to do next. They turn that research into briefings and warnings that help defenders prepare.
- First job?
- Usually a second jobMost start as SOC analysts, or as intelligence analysts in government or the military.
- Coding
- Little or none
- Start with
- CompTIA Security+
- Median US pay
- $129,180BLS May 2025, Information Security Analysts
What the job is like
The researcher: you study attackers so the organization can see them coming. A typical week might include:
- Read reports, news and hacker forums for signs of new attacks
- Match a group's methods to known techniques
- Brief leaders on which threats matter most to the organization
How to get in
Most start as SOC analysts, or as intelligence analysts in government or the military.
- Read public threat reports and summarize them in your own words.
- Learn MITRE ATT&CK, the shared language for attacker behaviour.
- Strong writing matters as much as technical skill, so practise it.
Certifications
Start with
- CompTIA Security+
Later, with experience
- GIAC GCTI
Free places to practise and learn
Habits that help in every cyber role
- Build a small home lab (an old laptop or free virtual machines is enough) and write up what you try.
- Do beginner capture-the-flag challenges and keep a simple public portfolio of what you learned.
- Go to a local ISSA, ISACA, OWASP or BSides meeting. Most are free for students, and many jobs come from people you meet there.
Questions about this role
Can I get a Threat Intelligence Analyst job straight out of school?
Usually not. Most start as SOC analysts, or as intelligence analysts in government or the military.
Do I need to know how to code to become a Threat Intelligence Analyst?
Very little. Comfort with computers matters more than programming; basic scripting can help later.
What certification should I get first to become a Threat Intelligence Analyst?
Good starting points: CompTIA Security+. Later, with experience: GIAC GCTI.
How much does a Threat Intelligence Analyst make?
The US Bureau of Labor Statistics reports a median of $129,180 a year (May 2025) for Information Security Analysts, the closest official category. Starting pay is usually lower and varies by city and employer.
Related roles
Not sure this is the one?
Take the 5-minute Pathway Finder and see how Threat Intelligence Analyst ranks against 13 other roles.
NICE work roles: Threat Analysis; All-Source Analysis. Pay: BLS Occupational Outlook Handbook, May 2025. Reviewed 2026-10-17 by Dr. Benjamin M. Ampel, Director of CCAIR.