- Threat intelligence lifecycle and models
- Attribution, profiling, and campaign tracking
- Structured analysis techniques and hypothesis testing
- Infrastructure and malware delivery analysis
- Threat intelligence platforms and sharing standards (STIX/TAXII)
- Reporting, visualization, and program best practices
Certified CTI Analyst
IronCircle's Certified CTI Analyst is an applied certification program for aspiring threat intelligence professionals. Track threat actors, map infrastructure, and deliver intelligence that powers real-world defense strategies.
Enroll NowProgram Details
The Certified CTI Analyst certification prepares learners to collect, analyze, and operationalize cyber threat intelligence in support of real-world defense efforts.
Built on IronCircle’s adaptive, hands-on proving ground, this certification equips you to track adversaries, uncover malicious infrastructure, and provide threat intelligence that strengthens real-world defense teams.
Skill Level
Beginner
Technical
recommended Pacing
10
hrs/week
for
10
weeks
- Best suited for learners who have completed IronCircle’s Certified SOC Analyst certification or have equivalent SOC experience.
- A strong understanding of security operations and threat frameworks, along with exposure to tools like SIEM, is recommended
- Cybersecurity professionals pivoting into CTI or threat research roles
- SOC analysts expanding beyond alert triage into proactive threat tracking
- Teams and enterprises looking to build or mature their CTI capabilities
- Students or graduates exploring specialized cyber defense careers
From IronCircle to Industry Leaders
Outcomes
Learners will be able to:
- Understand and apply the threat intelligence lifecycle
- Identify and analyze threat actors, infrastructure, and tactics
- Use structured analysis techniques to reduce bias and increase rigor
- Operate intelligence-sharing tools and protocols (MISP, ThreatConnect, etc.)
- Produce intelligence reports for multiple audiences
- Contribute to incident response, hunting, and executive briefings
- Build or support a formal cyber threat intelligence program
Benefits
Microcredentials
Three stackable microcredentials, each with an applied exam
Lab-Driven
Hands-on labs that replicate real-world adversary tracking
Career Support
Career support throughout the program through skills lists, case studies, and built-in interview prep to help showcase new skills and expertise to future employers
A White House-Recognized Leader in Cybersecurity Education
Recognized by the White House as one of nine partners who have made major commitments to fill cyber jobs.
Program Completion

Learners have 120 days to complete all three microcredentials. A certification is awarded for each microcredential upon passing its applied exam. Upon earning all three, learners receive the full, career-aligned IronCircle Certified CTI Analyst certification.
FAQ
Delivery
All lessons, labs, and exams are delivered through the IronCircle platform, an all-in-one, browser-based learning platform experience.
Equipment Requirements
To successfully complete the program, learners must have:
- A functional laptop or desktop computer with at least a 12-inch monitor
The program cannot be completed using a cell phone, Chromebook, iPad, or tablet. - Reliable broadband internet access
Cancellation Policy
Refunds are not provided for IronCircle learning experiences. Please see Terms & Conditions.