Listing Description
Background
PwC’s Global Threat Intelligence team is seeking strategic intelligence analysts who have a passion and aptitude for helping consumers understand the who, what and why of organised crime and espionage activity, and applying critical thinking concepts to distil non technical and technical information into robust assessments.
PwC’s Global Threat Intelligence practice focuses on the identification of novel intrusion techniques and tracking of several hundred threat actors, ranging from organised crime groups to state affiliated espionage actors, originating from more than 25 countries.
The practice is responsible for the development and delivery of technical and strategic threat research and intelligence services and provides:
- Subscription and bespoke research services to public and private sector intelligence clients globally;
- Intelligence support to, and collection from incident response and managed threat hunting teams;
- Insight to our adversary emulation team on novel tools and techniques used by cyber threat actors; and,
- Access to cutting edge research to inform and underpin all services provided by PwC’s several thousand strong cyber security consulting practice.
As a strategic analyst within PwC’s Global Threat Intelligence team, you’ll be responsible for explaining the what and the why of compromises and cyber attacks across the globe and PwC’s broad range of clients. From working on bespoke threat assessments, defining the threats to Critical National Infrastructure, to defining strategic collection requirements, generating intelligence reporting as part of our subscription intelligence service or in response to RFIs, you will have the opportunity to lead interactions with a wide ranging internal and external consumer base. You’ll also get to work as part of a world class intelligence team made up of technical analysts, focused on reversing malware and network tracking, and other strategic analysts contextualising cyber incidents and trends through geopolitical lenses.
Responsibilities
- Liaising and curating long term relationships with a broad stakeholder base to understand, document, prioritise, and communicate intelligence requirements.
- Creating written and verbal briefing content for client, sector, or region specific threat profiles by conducting detailed research, and applying robust analytical methodologies.
- Producing high-quality all-source analysis to complement the outputs of the technical analysts, and working collaboratively as part of a mixed-discipline team.
- Providing threat intelligence subject matter expertise, sharing your knowledge with internal stakeholders and clients alike.
- Clearly and concisely articulating complex incidents and situations, to a range of external stakeholders, from technical staff up to board level.
- Researching and gaining a deep understanding of particular aspects of different countries’ cyber operations, including understanding how geopolitics impacts and influences cyber operations.
Desirable but non essential skills
- Familiarity with regulatory threat intelligence and red team frameworks such as CBEST, TIBER, iCAST and CORIE.
- Language skills - in particular Mandarin, Cantonese, Russian, or Persian/Farsi.
- An understanding or knowledge of related regional geopolitics/wider security landscape.
- Familiarity with the application of threat modeling techniques, such as the Diamond model, Kill Chain, and F3EAD
- Training or qualifications such as SANS 578 (GCTI), CREST Certified Practitioner/Registered Threat Intelligence Analyst, or similar.
- A robust understanding of key principles of technical threat intel analysis and how to communicate the impact of technical analysis to non technical stakeholders.
Listing Details
- Citizenship: Not Provided
- Incentives: Bonus
- Education: Not Provided
- Travel: Travel 25
- Telework: Optional Telecommute