Threat Analyst

We are seeking a talented Cyber Threat Intelligence Analyst to gather, analyze, and report on critical cyber threat data. The successful candidate will conduct research and produce intelligence on cyber defense, technology, threat actors, geopolitical factors, and economic conditions. This role will collaborate with industry specialists and internal analysts to develop and maintain both short- and long-term research projects. Additionally, the analyst will present findings through briefings and external engagements, providing valuable intelligence to stakeholders at various levels. Key Responsibilities Threat Identification & Reporting: Discover, identify, and report regularly on significant cyber threats and risks to businesses, governments, and other organizations, focusing on cyber threat actors and groups from various global regions. Zero-Day Vulnerabilities: Research and write reports on zero-day vulnerabilities, including recommended mitigations and remediations. Fraud & Threat Intelligence: Develop and produce intelligence reports centered on complex fraud events, cyber threats, and emerging trends. Cyber Threat Actors & TTPs: Analyze cyber threat actors, groups, and events, and report on their tactics, techniques, and procedures (TTPs), motivations, sponsorships, and influencing factors. Strategic Intelligence Reports: Produce high-level strategic intelligence reports focusing on industry trends, cybersecurity threats, complex geopolitical events, and related impacts. Tactical & Operational Intelligence: Contribute to the drafting and dissemination of finished tactical and operational threat intelligence products, including reports and briefings. Risk Impact Assessment: Assess the likelihood of emerging threats impacting the organization and identify existing gaps or weaknesses. Threat Mitigation Strategies: Provide input and requirements for influencing threat mitigation strategies. Documentation & Response Support: Develop documentation to support response processes and procedures. Collaborate with Partners: Manage and integrate intelligence/data from vendor, consortium, and law enforcement partners to develop actionable intelligence. Internal Risk Analysis: Analyze internal risk and security controls to identify weaknesses and recommend improvements. Threat Intelligence Support: Provide ongoing threat intelligence support to cybersecurity teams during security incidents. Source Development & Evaluation: Maintain, develop, and continuously evaluate cyber threat intelligence sources to increase effectiveness and timeliness. Client Engagement: Respond to client requests for information (RFIs) and participate in the creation of company threat assessments. Stakeholder Communication: Interact with executives and stakeholders in both verbal and written forms, accurately conveying complex threat data in non-technical terms, including risk impact, likelihood, containment, remediation activities, and actor TTPs. Required Qualifications Experience: Minimum of [X] years of experience in cyber threat intelligence, cybersecurity, or a related field. Analytical Skills: Strong ability to analyze and interpret cyber threat data, vulnerabilities, and trends. Knowledge of TTPs: Deep understanding of cyber threat actors, their tactics, techniques, and procedures (TTPs). Research & Reporting: Experience in researching and producing high-quality intelligence reports for tactical and strategic decision-making. Communication Skills: Exceptional written and verbal communication skills with the ability to convey complex information to both technical and non-technical stakeholders. Cybersecurity Tools: Familiarity with cyber threat intelligence tools, threat feeds, and analysis platforms. Vulnerability Management: Knowledge and experience with identifying, reporting, and mitigating zero-day vulnerabilities. Preferred Qualifications Industry Experience: Previous experience in the financial services, healthcare, or government sectors. Technical Skills: Familiarity with cybersecurity tools such as SIEM, IDS/IPS, firewalls, and threat intelligence platforms. Advanced Certifications: Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM). Geopolitical Knowledge: Understanding of global geopolitical events and their impact on cybersecurity. Certifications Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) (preferred). Certified Cyber Threat Intelligence Analyst (CCTIA) is a plus.

#J-18808-Ljbffr