Senior Cyber Threat Intelligence Analyst

Location: Monterrey, Mexico | Employer: R.L. Polk S. de R.L. de C.V.

Why Mobility Global?

At Mobility Global, our mission is to provide the trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we are creating new opportunities for our customers, our business, and our people.

CARFAX, a division of Mobility Global, helps millions of people every day confidently shop, buy, service and sell used cars with innovative solutions powered by CARFAX vehicle history information. Shop, Buy, Service, Sell – Show me the CARFAX™.

What You’ll Do

• Own and run the Cyber Threat Intelligence (CTI) program end to end, from collection through analysis, production, dissemination, and feedback.
• Define and continuously mature the CTI program’s processes, standards, and roadmap.
• Serve as the primary point of contact and subject matter expert for cyber threat intelligence across Cyber Defense.
• Monitor, collect, and analyze intelligence from commercial threat intel platforms and open source and public sources, and manage and prioritize platform subscriptions and sources to maximize relevance and value.
• Produce structured, actionable intelligence products, including strategic, operational, and tactical briefs, indicator and TTP reports, and threat actor profiles.
• Track threat actors, campaigns, and TTPs relevant to the organization’s industry and threat landscape.
• Implement AI agents and AI-assisted workflows to support CTI operations, such as automating source monitoring, synthesizing intelligence from multiple platforms into structured briefs, and accelerating triage of raw threat data.
• Partner with DFIR and Threat Hunting teams, feeding intelligence into investigations and hunts and incorporating their findings back into the intelligence picture.
• Partner with Security Engineering to translate intelligence into detection context within Google SecOps.

What We’re Looking For

Required Qualifications

• 4+ years of hands-on experience in cyber threat intelligence.
• Experience working with commercial threat intel platforms such as Recorded Future, Flashpoint, Mandiant Threat Intel, Google Threat Intel, CrowdStrike Falcon, or similar.
• Strong understanding of the threat intelligence lifecycle and common frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
• Demonstrated experience implementing AI agents or tools to support CTI operations, and a proven ability to independently own and run an intelligence program end to end, without relying on a larger team.
• Strong analytical and problem-solving skills, with the ability to independently investigate and resolve complex technical challenges, and excellent written and verbal communication skills, including the ability to document technical solutions, detections, workflows, and operational procedures.

Expected Hours of Work: This is a full-time position. Work is generally performed Monday through Friday; however, limited participation in on-call rotations, after-hours escalations, weekends, and holidays may be required to support cybersecurity operations and major incidents.

Travel Requirements: Up to 10% of domestic and international travel may be required. Travel may include team meetings, training events, leadership workshops, cybersecurity conferences, and operational reviews.

This is a hybrid role. The in-office and remote arrangement will be set out in the employment contract.

Applicants must be legally authorized to work in Mexico at the time of hire. The company is unable to provide immigration or work permit support for this position.

The gross annual base salary for this position is $850,000 – $1,276,000 MXN. The final offer will be based on experience, skills, and qualifications, consistent with the principle of equal pay for equal work.

Equal Opportunity

Mobility Global is committed to equal opportunity and non-discrimination in accordance with Mexican law. Hiring decisions are not based on origin, sex, gender, sexual orientation, age, disability, health, pregnancy, religion, marital status, appearance, or any other characteristic protected by law. We provide reasonable accommodations for candidates with disabilities.

Privacy Notice

R.L. Polk S. de R.L. de C.V., with address at Avenida Constitución 2050, Monterrey, NL 64000, Mexico, processes your personal data to evaluate your application. Please do not include sensitive personal data or a photo in your CV.

Recruitment Fraud Alert

Mobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.