Blackstone

Blackstone

Threat Intelligence Analyst, Associate - Security Operations

New York · Mid

Sponsorship not specified$135k-$170kDetected 17 hours ago
PythonGitAWSAzureCloud PlatformsLLMsCybersecuritySIEMMicrosoft DefenderKQLSOC OperationsDetection EngineeringIncident ResponseSalesVoIPResearchLeadershipMentoring

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds (Level III)83
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

H-1B wage level

the lottery is wage-weighted — each level is one more entry

Level II · 2×
Level I$87,2561 entry
Level II$115,8352 entries
Level III$144,4143 entries
Level IV$172,9944 entries

$9,414 more — $144,414 — moves this role to Level III and 3 lottery entries. That figure is inside the range the employer already advertised.

Based on the DOL prevailing wage for this occupation and worksite, a base salary of $144,414 would place this position at wage Level III. That figure is within the posted range, and I'd like to target it. This role classifies under "Data Scientists" for prevailing-wage purposes.

DOL prevailing wage, 2026-27 wage year · Data Scientists (15-2051) · New York-Newark-Jersey City, NY-NJ. Wage level is derived by USCIS from the offered wage, occupation and worksite; the occupation shown is inferred from the job title.

Employer immigration record

from this employer's Department of Labor filings

Green-card intent detected

Blackstone, Inc. obtained a prevailing wage determination for Financial and Investment Analysts in San Francisco, CALIFORNIA on 2026-06-29. No matching green-card filing appears in our data yet. The determination expires in 21 days (2026-09-26), and a green-card filing must follow before then or the employer starts over.+2 more active determinations on file

Green-card follow-through: 71%

Of 7 labor certifications old enough to have been used, 2 expired without the employer filing the next step. Median time from filing to decision: 484 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

20 transfer filings in the last year, covering 20 workers. Median labor-condition decision: 7 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Blackstone is the world's largest alternative asset manager.
  • Blackstone's over $1.3 trillion in assets under management include global investment strategies focused on real estate, private equity, credit, infrastructure, life sciences, growth equity, secondaries and hedge funds.
  • Further information is available at www.blackstone.com.

Responsibilities

  • Map adversary behaviors to the MITRE ATT&CK framework and maintain threat actor profiles covering TTPs, intent, and relevance to Blackstone
  • Extract, validate, enrich, and operationalize indicators of compromise (IOCs) to support detection engineering and incident response workflows
  • Partner with Alert, Detection & Response and Incident Response teams to translate intelligence into production detections (Splunk SPL, Sigma, YARA)
  • Support threat-informed vulnerability prioritization (CVSS, EPSS, CISA KEV) and coordinate remediation tracking with asset owners
  • Support Fusion Center digital-threat monitoring, including brand, executive, and reputational exposure across OSINT, social media, and dark web sources
  • Contribute to intelligence sharing with trusted industry partners, ISACs (such as FS-ISAC), government partners (such as JCDC), and peer financial institutions
  • monitoring the evolving threat landscape, producing finished intelligence products and reports, extracting and enriching indicators of compromise (IOCs), and helping manage the firm's external attack surface and exposure risk.
  • The analyst leverages AI and automation tooling to collect, enrich, and operationalize intelligence at scale, and develops clear visual products such as diagrams to make threats understandable to both technical and non-technical audiences.
  • Capable of writing clearly and developing visual products (such as diagrams) to communicate complex cyber threats to both technical and non-technical stakeholders, including executive leadership
  • Advising on marketing plans prepared by a sales team or developing and/or contributing information for marketing materials.

Requirements

  • 2+ years of experience in cyber threat intelligence, security operations, incident response, or a related cybersecurity discipline
  • Working knowledge of intelligence frameworks such as MITRE ATT&CK, the Diamond Model, or the Intelligence Cycle
  • Experience with threat intelligence platforms (TIPs), SIEM tools (e.g., Splunk), OSINT research methodologies, or attack surface management / vulnerability management tooling
  • Demonstrated, hands-on experience applying AI tooling (such as LLMs and coding assistants) to real work, and can clearly speak to several projects where you used AI to automate or accelerate a task
  • All Blackstone employees, including but not limited to recruiting personnel and hiring managers, are required to abide by this policy.
  • Depending on the position, you may be required to obtain certain securities licenses if you are in a client facing role and/or if you are engaged in the following:
  • Fields marked with a red asterisk * must be completed to be considered for employment (although some can be answered "prefer not to say").

Nice to have

  • Experience in the financial sector or an organization with a global threat landscape
  • Hands-on experience with Attack Surface Management platforms (e.g., Mandiant ASM, CrowdStrike Falcon Surface, Microsoft Defender EASM, or similar)
  • Experience with vulnerability management programs, including prioritization frameworks (CVSS, EPSS, CISA KEV) and remediation tracking
  • Familiarity with structured analytic techniques and intelligence writing standards
  • Experience with detection content development (Sigma, YARA, Splunk SPL, or KQL)
  • Active participation in industry working groups, ISACs, or CTI community forums
  • Relevant certifications (GIAC GCTI, Security+, CTIA, or similar)
  • Exposure to cloud environments (AWS, Azure) and an understanding of cloud-specific threat vectors

Compensation

  • $135,000 - $170,000
  • Actual base salary within that range will be determined by several components including but not limited to the individual's experience, skills, qualifications and job location.
  • For roles located outside of the US, please disregard the posted salary bands as these roles will follow a separate compensation process based on local market comparables.
  • Additional compensation and benefits offered in connection with the role consist of comprehensive health benefits, including but not limited to medical, dental, vision, and FSA benefits; paid time off; life insurance; 401(k) plan; and discretionary bonuses.
  • Certain employees may also be eligible for equity and other incentive compensation at Blackstone's sole discretion.
  • This policy applies to all terms and conditions of employment, including but not limited to hiring, placement, promotion, termination, transfer, leave of absence, compensation, and training.

Benefits

  • BXTI is entrepreneurial - our open, iterative design processes and rapid pace of development mean that everyone on the team has the opportunity to make an impact from day one.

Company info

  • We are problem solvers who can take projects from idea to implementation.
  • we are pioneering the use of AI and automation to outpace adversaries, we move quickly from idea to production, and we give analysts real ownership to shape how intelligence is practiced rather than slot into a routine.

Equal opportunity

  • If you need a reasonable accommodation to complete your application, please contact Human Resources at 212-583-5000 (US), +44 (0)20 7451 4000 (EMEA) or +852 3656 8600 (APAC).

Visa & Work Authorization

  • nd applicants for employment without regard to race, color, creed, religion, sex, pregnancy, national origin, ancestry, citizenship status, age, marital or partnership status, sexual orientation, gender identity or expre
Apply directly at Blackstone →Create a free account for alerts like thisView Blackstone immigration profile

This listing is sourced directly from Blackstone's careers page and normalized into a canonical job model.