{"id":1932973,"url":"https://alion.io/job/internova-threat-operations-analyst","title":"Threat Operations Analyst","company":{"id":1803887,"name":"Internova","domain":"internova.com","url":"https://alion.io/company/internova","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Montevideo, Uruguay"],"countries":["UY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":139000,"period":"year","method":null,"sample_n":4493},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"Recorded Future","optional":false}],"status":"live","first_seen_at":"2026-10-05T22:32:11Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-12T22:43:36Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Overview\nInternova Travel Group is one of the largest travel services companies in the world with a collection of leading brands delivering high-touch, personal travel expertise to leisure and corporate clients. Internova manages leisure, business and franchise firms through a portfolio of distinctive divisions. Internova represents more than 100,000 travel advisors in over 6,000 company-owned and affiliated locations predominantly in the United States, Canada and the United Kingdom, with a presence in more than 80 countries. Click here for more information about Internova Travel Group.\nResponsibilities\nThe Threat Operations Analyst supports the daily operation of Internova's end user facing security controls and contributes to the identification, analysis, and disposition of threats affecting the enterprise. The role combines hands on operational work, including end user support, SOC escalation handling, and email and endpoint protection administration, with analytical work covering event triage, phishing and business email compromise analysis, threat intelligence and brand protection monitoring of Internova's external footprint, and validation of vulnerabilities and reported threats.\nThe Internova Travel Group Information Security Team is committed to providing outstanding support to our team members to ensure continued growth opportunities, and access to extraordinary tools and technology. Our corporate culture encourages leaders at all levels to think independently, make decisions autonomously, and inspire passion in all aspects of our work.\nAddress end user support request for information security issues and SOC escalation requests.\nDay to day administration of end user facing security technologies (Mimecast, Microsoft 365 ATP, Cisco Umbrella, Cisco AMP)\nMonitor and report on security events across multiple internal platforms, performing first line triage and escalating with sufficient documentation for downstream analysis.\nSupport phishing and business email compromise defense, including analysis of user reported messages, tuning of ATP and Mimecast rule sets, and extraction of indicators for blocking and detection use.\nTrack threat activity relevant to the travel and hospitality sector using Recorded Future and other sources, including business email compromise, credential stuffing, booking and payment fraud, and supplier impersonation, and summarize the impact for Internova.\nDay to day use of Recorded Future for threat intelligence and brand reputation monitoring, including alert triage, watch list and query maintenance, indicator enrichment, and routing of actionable intelligence to the appropriate owner.\nInvestigate brand and domain impersonation, typosquatting, exposed services, and credential exposure affecting Internova and its brands, coordinating takedown and blocking action and reporting findings to enterprise security leadership.\nSupplement platform reporting with independent open source intelligence collection, structuring findings so they can be acted on rather than simply forwarded.\nValidate and triage vulnerability scanner and security tooling output, separating exploitable findings from false positives and tracking remediation to closure with application and infrastructure owners.\nAssist information security team members with project tasks, troubleshooting, and administration responsibilities, and recommend tooling and process enhancements to senior information security staff.\nQualifications\nBachelor's degree in software engineering, computer science, cybersecurity, computer information systems, a related field, or equivalent practical experience.\n0 to two years of professional experience, inclusive of internships, co-ops, or research appointments in security operations, threat analysis, penetration testing, or application security.\nAbility to analyze security events and logs methodically, form a hypothesis, and reach a defensible conclusion about whether activity is malicious, suspicious, or benign.\nWorking knowledge of common attack techniques against web applications, APIs, identity systems, and email, including authentication, authorization, injection, and business logic flaws.\nUnderstanding of indicators of compromise and how they are collected, enriched, and applied to detection and blocking.\nExposure to at least one major cloud platform (AWS, Azure, or GCP) and to core cloud security concepts such as identity, logging, and network segmentation.\nFamiliarity with industry standard encryption technologies and cybersecurity technical controls.\nExcellent written and verbal communication skills, including the ability to explain technical risk to non technical stakeholders and to write findings a reader can act on.\nAbility to apply organizational policies and procedures to everyday operational decisions.\nAbility to travel as needed\nPay and Benefits\nOur benefit offerings include medical insurance, meal tickets, transportation allowance, paid time off, discounted employee travel options, access to LinkedIn Learning webinars and courses.\nThe salary range on this job posting/advertising has been developed to give applicants a range based on the local market where the candidate would be working. Many factors, such as years of experience, budget etc. are considered when determining the starting rate of pay.\nThis role may be eligible for an incentive, commission, bonus, or a discretionary bonus program based on the company’s financial goal achievement and individual performance.\nInternova Travel Group is an Equal Opportunity Employer. We make employment decisions without regard to age, race, religion, national origin, gender, disability, veteran status, genetic information, sexual orientation and gender identity or any other protected class.\nProspective Employee Privacy Policy","description_format":"text","description_chars":5800,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Growth opportunities","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Professional Services","Travel & Tourism","Travel Agencies"],"lifecycle":[{"event":"open","at":"2026-10-05T22:32:11Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.458,"p_room":0.368,"age_days":6,"expected_fill_days":3,"reasons":["conf:2","velocity","win:tail"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/internova-threat-operations-analyst","json_url":"https://alion.io/job/internova-threat-operations-analyst.json","meta":{"generated_at":"2026-10-13T01:41:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2430,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1803887},"rest":"https://alion.io/mcp/rest/get_company?id=1803887"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finternova-threat-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finternova-threat-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finternova-threat-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/internova-threat-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finternova-threat-operations-analyst"}]}