Analyst - Cyber Threat Intelligence

Overview

Professional/Regulatory/Certification Requirements

• Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.).
• Holding any of the following certifications (or working toward / or similar) would be preferred: GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Examiner (GFCE), GIAC Certified Forensic Analyst (GCFA), GIAC Continuous Monitoring (GMON), GIAC D

Skills, Tools, and Systems Experience

• Experience using Cyber Kill Chain.
• Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using Custom tools and scripts.
• Demonstrable experience of analyzing and interpreting system, security, and application logs.
• Experience with offensive security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks.
• Advanced knowledge of operating system internals and security mechanisms.
• Experience analyzing attacker techniques at all stages of a breach.
• Experience in forensics, threat intelligence, incident response.
• Skilled working with extremely large data sets, using tools and scripting languages such as: SQL/KQL, Python, Splunk, etc.
• Working knowledge of EDR solutions.

Responsibilities

• Support the CLIENT Digital Defence Center in researching and reporting on emerging threats
• Respond to and analyze major cyber security incidents
• Conduct forensic investigations across a complex multi-cloud environment
• Support threat hunting cycles
• Engage in purple team activities