Threat Intelligence Analyst, GSOC

Block is one company built from many blocks, all united by the same purpose of economic empowerment. The blocks that form our foundational teams - People, Finance, Counsel, Hardware, Information Security, Platform Infrastructure Engineering, and more - provide support and guidance at the corporate level. They work across business groups and around the globe, spanning time zones and disciplines to develop inclusive People policies, forecast finances, give legal counsel, safeguard systems, nurture new initiatives, and more. Every challenge creates possibilities, and we need different perspectives to see them all. Bring yours to Block.
The Role
The GSOC Threat Intelligence Analyst supports global threat management, incident response, employee safety, crisis communications, and travel risk as part of the Global Safety & Security (GSS) team. Reporting to the Head of Global Safety & Security, you partner closely with GSOC peers and cross functional teams to manage threat and incident intake, deliver actionable intelligence, and strengthen operational readiness across the business.
In this role, you help ensure fast, effective, and well coordinated responses that protect employees, executives, and business operations worldwide. Your work directly contributes to employee safety, informed decision making, and the company's ability to operate confidently in a dynamic global environment.
You Will

• Monitor global events and open source intelligence to identify emerging risks and support timely incident response
• Manage threat and incident intake, documentation, and intelligence repositories to enable consistent and scalable operations
• Partner with cross functional teams to coordinate crisis response and maintain readiness across regions and time zones
• Collaborate with contract analysts by providing guidance, training support, and escalation assistance
• Draft and deliver crisis communications, alerts, briefings, and employee safety messaging
• Produce travel safety assessments and monitor global disruptions that may impact employees or business operations
• Produce trend and pattern analysis across incidents and intelligence reporting to identify emerging or evolving threats
• Develop forward looking threat assessments and risk outlooks to support planning, preparedness, and leadership awareness
• Translate intelligence findings into clear, actionable recommendations for GSOC leadership and operational partners
• Support the definition and refinement of intelligence requirements aligned to people safety, business critical assets, and operational priorities
• Analyze threat actor tactics, techniques, and procedures (TTPs) across incidents to inform risk assessment and response decisions
• Maintain and improve GSOC documentation, training materials, and operational dashboards to strengthen team effectiveness

You Have

• Typically 4 to 7 years of experience in threat intelligence, security operations, crisis response, or a related field, or an equivalent combination of education and practical experience
• Bachelor's degree in a related field or equivalent work experience
• Strong open source intelligence, threat assessment, and incident response capabilities
• Experience producing intelligence outputs such as incident reporting, trend analysis, threat assessments, or operational briefings
• Clear and effective communication skills for written intelligence, briefings, and crisis messaging
• Experience working with security systems and contributing to incident or crisis response processes
• A collaborative, customer focused approach with strong judgment and attention to detail
• Ability to prioritize effectively, adapt to changing conditions, and remain steady in fast paced operational environments
• Experience partnering with external intelligence or security vendors
• ASIS or other relevant industry certifications

Technologies We Use and Teach

• Ontic
• AlertMedia
• Crisis24

We're working to build a more inclusive economy where our customers have equal access to opportunity, and we strive to live by these same values in building our workplace. Block is an equal opportunity employer evaluating all employees and job applicants without regard to identity or any legally protected class. We will consider qualified applicants with arrest or conviction records for employment in accordance with state and local laws and "fair chance" ordinances.
We believe in being fair, and are committed to an inclusive interview experience, including providing reasonable accommodations to disabled applicants throughout the recruitment process. We encourage applicants to share any needed accommodations with their recruiter, who will treat these requests as confidentially as possible. Want to learn more about what we're doing to build a workplace that is fair and square? Check out our I+D page .
While there is no specific deadline to apply for this role, U.S. roles are typically open for an average of 55 days before being filled by a successful candidate. Please refer to the date listed at the top of this job page for when this role was first posted.
Block takes a market-based approach to pay, and pay may vary depending on your location. U.S. locations are categorized into one of four zones based on a cost of labor index for that geographic area. The successful candidate's starting pay will be determined based on job-related skills, experience, qualifications, work location, and market conditions. These ranges may be modified in the future.
To find a location's zone designation, please refer to this resource . If a location of interest is not listed, please speak with a recruiter for additional information.
Zone A:
$111,700 - $167,500 USD
Zone B:
$103,800 - $155,800 USD
Zone C:
$98,200 - $147,400 USD
Zone D:
$89,400 - $134,000 USD
Application Guidelines
Candidates may submit up to 9 active applications within a 60-day period. Reapplications to the same role are accepted 90 days after a previous application has been reviewed.
Use of AI in Our Hiring Process
We may use automated AI tools to evaluate job applications for efficiency and consistency. These tools comply with local regulations, including bias audits, and we handle all personal data in accordance with state and local privacy laws.
Contact us here with hiring practice or data usage questions.
Every benefit we offer is designed with one goal: empowering you to do the best work of your career while building the life you want. Remote work, medical insurance, flexible time off, retirement savings plans, and modern family planning are just some of our offering. Check out our other benefits at Block.
Block, Inc. (NYSE: XYZ) builds technology to increase access to the global economy. Each of our brands unlocks different aspects of the economy for more people. Square makes commerce and financial services accessible to sellers. Cash App is the easy way to spend, send, and store money. Afterpay is transforming the way customers manage their spending over time. TIDAL is a music platform that empowers artists to thrive as entrepreneurs. Bitkey is a simple self-custody wallet built for bitcoin. Proto is a suite of bitcoin mining products and services. Together, we're helping build a financial system that is open to everyone.