Threat Intelligence Analyst, GSOC

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams — People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more — provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.

The Role

The GSOC Threat Intelligence Analyst supports global threat management, incident response, employee safety, crisis communications, and travel risk as part of the Global Safety & Security (GSS) team. Reporting to the Head of Global Safety & Security, you partner closely with GSOC peers and cross functional teams to manage threat and incident intake, deliver actionable intelligence, and strengthen operational readiness across the business.

In this role, you help ensure fast, effective, and well coordinated responses that protect employees, executives, and business operations worldwide. Your work directly contributes to employee safety, informed decision making, and the company’s ability to operate confidently in a dynamic global environment.

You Will

• Monitor global events and open source intelligence to identify emerging risks and support timely incident response


• Manage threat and incident intake, documentation, and intelligence repositories to enable consistent and scalable operations


• Partner with cross functional teams to coordinate crisis response and maintain readiness across regions and time zones


• Collaborate with contract analysts by providing guidance, training support, and escalation assistance


• Draft and deliver crisis communications, alerts, briefings, and employee safety messaging


• Produce travel safety assessments and monitor global disruptions that may impact employees or business operations


• Produce trend and pattern analysis across incidents and intelligence reporting to identify emerging or evolving threats


• Develop forward looking threat assessments and risk outlooks to support planning, preparedness, and leadership awareness


• Translate intelligence findings into clear, actionable recommendations for GSOC leadership and operational partners


• Support the definition and refinement of intelligence requirements aligned to people safety, business critical assets, and operational priorities


• Analyze threat actor tactics, techniques, and procedures (TTPs) across incidents to inform risk assessment and response decisions


• Maintain and improve GSOC documentation, training materials, and operational dashboards to strengthen team effectiveness

You Have

• Typically 4 to 7 years of experience in threat intelligence, security operations, crisis response, or a related field, or an equivalent combination of education and practical experience


• Bachelor’s degree in a related field or equivalent work experience


• Strong open source intelligence, threat assessment, and incident response capabilities


• Experience producing intelligence outputs such as incident reporting, trend analysis, threat assessments, or operational briefings


• Clear and effective communication skills for written intelligence, briefings, and crisis messaging


• Experience working with security systems and contributing to incident or crisis response processes


• A collaborative, customer focused approach with strong judgment and attention to detail


• Ability to prioritize effectively, adapt to changing conditions, and remain steady in fast paced operational environments


• Experience partnering with external intelligence or security vendors


• ASIS or other relevant industry certifications

Technologies We Use and Teach

• Ontic


• AlertMedia


• Crisis24

We’re working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and “fair chance” ordinances.

We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we’re doing to build a workplace that is fair and square? Check out our I+D page.

While there is no specific deadline to apply for this role, U.S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted.