Intelligence Analyst - Influence Operations Intelligence & Discovery

About the Tean

US Data Security (USDS) Joint Venture (JV) provides industry-leading security and privacy services to US users and supports TikTok Global. Our organization uses four principles that guide our operations. Firstly, we champion trust and transparency, leading the charge that drives customer confidence. Secondly, we are an engine of innovation. Thirdly, we drive risk-informed and empowered decision-making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development – to consistently build sustainable world-class security capabilities.

About the Role

As a member of the Influence Operations Intelligence & Discovery (IOID) Team, the candidate will leverage strategic geopolitical expertise and tactical knowledge of influence operations to identify trends and tradecraft of Advanced Persistent Manipulators (APMs) to drive action and response, unveil command and control (C2) elements, and document adversary tactics, techniques, and procedures (TTPs). The candidate must be able to use formal intelligence and incident response best practices to develop tracking and documentation of identified APMs. The candidate must have expert threat management skills including identification, prioritization, treatment, classification, and monitoring. The candidate must have excellent written and verbal communications skills for developing and briefing intelligence products for cross-functional teams and leadership as appropriate. Further, the candidate is expected to use communication skills to work closely with cross-functional partners in response to actions across a variety of security disciplines to disseminate information and reporting as appropriate in support of TikTok's critical business and operational needs.

Responsibilities

• Possess geopolitical expertise in areas of responsibility to accurately trend IO and adversary strategic objectives
• Conduct OSINT monitoring and research to identify off-platform trends
• Uncover, record, and map adversary trends and tradecraft
• Maintain tools needed for tracking and memorialization of adversary actions and IO campaigns
• Respond to escalated events and actions when needed
• Develop intelligence reporting on hunting and investigation findings

Minimum Qualifications

• 4+ years of professional experience, Proven track record of acquiring, aggregating, analyzing, and reporting on complex datasets. Expertise in open-source intelligence (OSINT) collection, tradecraft, and intelligence reporting.
• Experience designing, optimizing, and executing operational workflows within fast-paced technical environments. Ability to evaluate, prioritize, and mitigate critical business risks in real-time high-stress scenarios.
• Demonstrated ability to proactively hunt for diverse types of high-risk activity, including "unknown unknowns." Rigorous analytical and critical-thinking skills with a high degree of attention to detail.
• Deep understanding of information warfare principles and comprehensive knowledge of modern information warfare history over the past decade. Firm grasp of adversary TTPs (Tactics, Techniques, and Procedures) with the ability to apply an adversarial lens to counter platform abuse.
• Hands-on experience detecting, tracking, and dissecting influence operations, disinformation, and other forms of social media manipulation. Ability to think creatively and identify previously unknown threats, vulnerabilities, and risks, while driving cross-functional stakeholder buy-in to implement strategic change.
• Measurable knowledge/experience from proven industry, military, defense, or government operations and/or bachelor’s degree in security (including cyber security), political science, and/or computer science or equivalent information security, privacy, risk, compliance, project management or similar discipline from an accredited college or university.

Preferred Qualifications

• 4+ years of professional experience in threat intelligence, security operations, data analysis, or a related domain
• Experience identifying, tracking, and analyzing adversary tradecraft and behavioral tactics.
• Proven track record of conducting threat actor attribution and campaign mapping. Experience translating adversary tradecraft into detection logic and developing automated detection rules.
• Strong written and verbal communication skills, with a history of collaborating across global, multi-functional teams and intelligence partners. Experience authoring and disseminating intelligence reports tailored for both technical practitioners and leadership.
• Deep knowledge of threat intelligence platforms, data feeds, and open/closed intelligence sources.Excellent time management, prioritization, negotiation, and interpersonal skills in high-tempo environments.
• Self-motivated to drive results and scale security capabilities within a complex enterprise environment. Proficiency in SQL for querying and analyzing large, complex data sets.
• Hands-on experience leveraging graph analysis tools to map threat actor infrastructure and entity relationships. Experience developing AI agents and designing innovative AI-driven solutions for threat intelligence workflows.