Minimum qualifications:

• Bachelor's degree or equivalent practical experience
• 5 years of experience with finished intelligence analysis or intelligence reports.
• Experience with cyber threat intelligence and threat hunting.

Preferred qualifications:

• Experience leveraging generative AI/LLM tools (i.e., prompt engineering, LLM-driven summarization) within intelligence production workflows.
• Experience querying and analyzing datasets using SQL.
• Experience in state-sponsored cyber operations, financially-motivated cyber crime, or emerging threats to AI ecosystems.
• Proficiency in skills associated with the principles of intelligence writing and briefing with the knowledge of structured analytic techniques for intelligence analysis.
• Understanding of traditional Cyber Threat Intelligence (CTI) indicators of compromise (IOCs) and threat hunting.
• Ability to work cross-functionally across matrixed organizations to drive risk remediation, cross-team alignment.

About the job

Responsibilities

• Drive operational threat intelligence reporting and assist in the identification and refinement of priority intelligence requirements held by internal stakeholders.
• Collect, correlate and analyze data points derived from a wide array of sources (e.g., internal telemetry, first-party GTIG mission research) to identify adversary trends.
• Support the end-to-end production lifecycle of multiple cornerstone intelligence deliverables leveraged by varied internal stakeholders and Google product areas. Produce ad hoc, requirement-driven intelligence assessments and forward-leaning analysis that anticipates threats to Google, its product areas and its users.
• Pilot and integrate AI capabilities (LLMs, NotebookLM, automated templates) to accelerate summarization, trend identification and drafting across the production workflow.
• Translate technical analysis into clear narratives and data visualizations tailored to both technical defenders and non-technical executive audiences. Leverage feedback mechanisms to refine investigative approaches and improve the clarity, impact and actionability.