Job Purpose

Herc Rentals is seeking a skilled and motivated Threat Intelligence Analyst to join our growing Cybersecurity team. In this role, you will identify, research, and analyze cyber threats targeting our enterprise infrastructure, business operations, and data assets. You will serve as a critical intelligence resource — translating raw threat data into actionable insights that strengthen our security posture and protect our people, customers, and systems.

What you will do...

Threat Research & Intelligence Collection

• Monitor and collect threat intelligence from open-source (OSINT), dark web, deep web, commercial feeds, and industry-sharing communities (ISACs, CERTs)
• Track threat actors, campaigns, malware families, and emerging attack techniques relevant to the equipment rental and logistics industry
• Consolidate and manage threat intelligence feeds and platforms (TIPs)

Analysis & Reporting

• Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model
• Produce strategic, operational, and tactical threat intelligence reports tailored to both technical teams and executive stakeholders
• Deliver timely threat briefings and risk assessments to leadership and security operations teams

Collaboration & Incident Support

• Partner with the Security Operations Center (SOC), Incident Response, and Vulnerability Management teams to provide threat context during active investigations
• Integrate threat intelligence into SIEM platforms, endpoint detection tools (CrowdStrike), and network security systems (Cisco/Fortinet, Cloudflare)
• Coordinate with IT and business units to ensure threat intelligence informs broader security strategy

Tools & Automation

• Leverage SIEM, threat intelligence platforms, intrusion detection systems, and malware analysis tools to support investigations
• Utilize Rapid7 for vulnerability scanning correlation and threat prioritization
• Contribute to the development of detection rules, threat models, and playbooks

Compliance & Risk Management

• Identify and assess threats relevant to regulatory compliance obligations
• Support risk assessments by providing intelligence on threat likelihood and potential business impact
• Assist in maintaining security awareness by sharing relevant threat trends with internal stakeholders

Requirements

Education:

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Digital Forensics, or a related field — or equivalent practical experience.

Experience:

4+ years of experience in a cybersecurity role, with at least 2 years focused on threat intelligence or threat analysis. (Raised to better match the seniority of the responsibilities.)

Technical Skills:

• Proficiency with SIEM platforms and log analysis
• Familiarity with endpoint detection & response (EDR) tools (e.g., CrowdStrike)
• Knowledge of network protocols, traffic analysis, and intrusion detection (e.g., Snort, Suricata, Wireshark)
• Experience with threat intelligence platforms (TIPs) and OSINT tools
• Familiarity with malware analysis concepts (deeper reverse-engineering depth moved to Preferred)

Frameworks: 

Working knowledge of MITRE ATT&CK and the Cyber Kill Chain

Communication & Soft Skills:

• Strong written communication — ability to produce clear, concise intelligence reports for both technical and executive audiences
• Ability to translate complex technical findings into actionable briefings for non-technical stakeholders
• Strong analytical and problem-solving skills with attention to detail
• Proven time-management and organizational skills, with the ability to balance multiple competing priorities
• Collaborative contributor — able to work independently and as part of a team
• Comfortable engaging and building relationships across all levels of the organization

Preferred Qualifications

• Relevant certifications such as GCTI, GCIH, CEH, CISSP, CompTIA CySA+, or Security+ (or equivalent experience)
• Understanding of malware analysis techniques and reverse engineering fundamentals
• Experience with cloud security environments (AWS preferred)
• Familiarity with dark web monitoring tools and threat actor profiling
• Prior experience in a SOC or incident response capacity
• Knowledge of the equipment rental, logistics, or industrial sector threat landscape

Skills