Cyber Threat Intelligence Analyst

YOUR ROLE

We are looking for a Cyber Threat Intelligence (CTI) Analyst profile to watch and understand the threats

that can affect our industry and organization, anticipate future threats, and create threat intelligence-driven products.

The Cyber Threat Intelligence Analyst reports to the CTI Lead.

WHAT ARE YOU GOING TO DO?

As Cyber Threat Intelligence Analyst within the Cyber Defense Center, you will:

Develop global watch intelligence:

• Watch cybersecurity blogs, research and leaks;
• Monitor the clear, the deep and the dark web for data and threats;
• Interpret political and economical news and events with a cyber point of view;

Watch the global cyber threat landscape:

• Compile attacker Tactics, Techniques and Procedures (TTPs);
• Support Digital Forensic and Incident Response (DFIR), fraud and legal investigations;
• Improve monitoring and alerting;
• Enable threat hunting based on past events;

Understand threat actors and anticipate future threats:

• Follow and watch threat actor’s activities and operations;
• Extrapolate threat actor’s objectives, methodologies and targets;
• Enable pro-active threat assessments;

Create threat intelligence-driven products:

• Contextualized security and threat landscape briefings for our organization and partner
• ISACs;
• Analysis of threats and attacks to a business function & assets;
• Recommendations on how to position our cyber defenses based on expected attacks;
• Compile and contextualize of Indicators of Compromise (IoCs);

Other responsibilities:

• Contribute to on-call rotation and be available for punctual off-hours emergency work;
• Participate to information sharing and collaboration (ISAC) efforts;
• Participate to CERT/SOC transversal collaboration activities;
• Participate to projects, improvements and compliance efforts related to CERT matters;
• Participate to monthly metrics;

WHAT ARE WE LOOKING FOR?

• Bachelor's degree in Information Technology or related fields.
• 5 or more years of experience in a role with similar responsibilities, including CERT or SOC.
• Excellent understanding of Cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, Mitre Att&ck.
• Good understanding of information security frameworks (e.g. : ISO 27000, NIST framework).
• Hold relevant cybersecurity industry credentials, including Technical SANS/GIAC certifications, Technical EC Council certifications, CISSP, and/or CISA.
• Able to convey an information security message to an organization’s management and technical staff.
• Experience in the transport/shipping/logistics is a plus.

WHAT DO WE HAVE TO OFFER?

• HMO w/ 2 free dependents from day 1 of hiring
• Group Life Insurance
• Medical Reimbursement (includes eyeglasses)
• Service Incentive Leave + Sick Leave + Vacation Leave + Bereavement Leave
• Birthday token
• Annual Performance Reviews w/ a chance of a salary alignment
• Annual Company Performance Bonus
• Retirement Fund

ABOUT TOMORROW

We value your professional and personal growth. That’s why we share plenty of career opportunities for you to thrive within CEVA. Join CEVA for a challenging career.