Senior Cyber Threat Intelligence Analyst - Intel 471, Inc Frisco, TX, USA Bookmark Share Print 1108 1 7

Listing Description

Intel 471 is looking for a leading cyber threat intelligence professional who is hard working, self-motivated, confident, interpersonal, and well spoken. The successful candidate is an influential voice in the cyber threat intelligence industry who possesses subject-matter expertise across the cybercrime underground landscape. A dedicated and experienced practitioner by trade, the successful candidate has a knack for applying tactical threat intelligence to meet operational goals in fast-paced and dynamic enterprise environments.

The Senior Intelligence Analyst is part of the analysis team within Intel471’s intelligence department. The intelligence analysis team primarily is responsible for creating analytical intelligence products, supporting ongoing projects, initiatives, programs and on-demand intelligence requests.

The role will report to our Director of Analysis but will be expected to support other areas of the company as needed. The role is available in Frisco, Texas and involves occasional travel within the United States, Europe and Asia. The role requires regular contact with our international teams located in South America, Western and Eastern Europe, and Asia so a comfort working with diverse backgrounds is required.

A strong package that includes a competitive salary and company stock is available for the successful applicant.Key Responsibilities:

Provide timely intelligence analysis reports and support client deliverables;

Collaborate internally and externally to develop and enhance analytical products;Own and execute ongoing projects, initiatives and respond to on-demand intelligence requests;

Acquire in-depth knowledge of Intel471 products, services, data sets and tool sets;

Create, maintain and triage alerts to support the intelligence requirements program;

Receive, prioritize and respond to Requests for Information (RFI) from clients;

Analyze raw data sets and extract relevant insight;

Identify intelligence collection gaps and communicate findings and collection requirements to “on-the-ground” researchers;

Analyze several disparate data sources to produce analytical products;

Mentor and train associate and midlevel analysts;

Initiate, propose, develop and provide intelligence briefings in support of the engagement strategy;

Initiate, propose, and create processes and standard operating procedures to support team resiliency;

Identify and communicate opportunities for new tools, products, projects and systems;

Assess new threat vectors and develop intelligence on threat actor tactics, techniques and procedures (TTPs); and

Take ownership and ensure end-to-end execution on strategic and tactical projects that can be developed into Intel471 products.

Requirements:

More than five years’ experience in an intelligence role, threat intelligence or equivalent;

Degree in intelligence, cybersecurity, criminology, computer science, information technology, information security, engineering or equivalent work experience; master’s degree is a plus;

Must be an adaptable, inquisitive and self-motivated team player with strong analytical skills, eager to learn and possess the ability to work independently and as part of a team;

Possess experience working independently and under pressure with minimal supervision;

Display the ability to learn or develop new processes quickly in response to changes in business requirements;

Experience working/interacting with enterprise environments and teams, such as NOC, SOC, JOC, fraud, CTI, CISO groups, and IT security;

Deep understanding of threat vectors and basic mitigating controls such as IPS, IDS, WAF, etc.; and experience leveraging that knowledge to effectively communicate business risk as it relates to the client’s cyber threat posture;

Strong analytical writing and presentation skills;

Hands-on experience with command line utilities and basic scripting abilities using Bash, Python or Perl is a plus;

Hands-on experience with databases and structured query language (SQL) and/or noSQL is a plus;

Strong understanding of cybercrime offerings, malware and intelligence products available in the market;

Proficient in open source intelligence (OSINT) research and common tool sets;

Excellent written and verbal skills; fluency in English is required;

Deep understanding and knowledge of the cybercriminal underground ecosystem; terminology and common hacking tools and methods, such as carding, fraud, exploits, malware, vulnerabilities etc.;

Experience identifying and evaluating new sources of intelligence and integrating numerous types of cybersecurity data sources into cyber threat analysis products;

Experience proactively research emerging cyber threats, apply analytical understanding of attacker methodologies and tactics, system vulnerabilities, and key indicators of attacks and exploits;

Good understanding of TCP, IP and other lower level network protocols, as well as common higher-level protocols such as HTTP(s), SMTP, FTP, and SSH;

Experienced with industry recognized analysis framework and compliance standards, such as Kill Chain, Diamond Model, OWASP, NIST, HIPPA, PCI, etc.; and

Experienced with multiple computing platforms, including Windows, OSX, Linux, Unix.