Cyber Threat Intelligence Researcher

Vector Synergy; Brussel Hoofdstad; On-site; EUR 70,000 - 110,000; Full time

Job summary

Vector Synergy in Brussels is seeking a Cyber Threat Analyst to join the Threat Analysis Branch, focusing on researching threat actors' TTPs and producing actionable intelligence for alliance-wide defense.

You will develop detection signatures, write technical reports, and create scripts to automatically track threat infrastructure using open-source and commercial tools. Collaboration with defenders and emulation efforts is required.

Qualifications

• University degree in quantitative discipline with ≥2 years of related experience or 4 years of equivalent experience.
• Knowledge of threat actor groups, attack patterns, and TTPs to produce actionable threat intelligence.
• Familiarity with intelligence lifecycle and MITRE ATT&CK.

Responsibilities

• Support Cyber Threat Analysis Branch work; research threat actors’ TTPs and produce actionable reports.
• Create scripts and queries to track threat actor infrastructure using commercial and open-source tools.
• Write technical threat intelligence products, including detections, to aid network defenders.

Skills

Threat intelligence analysis

Threat hunting

MITRE ATT&CK

Scripting & queries

Education

University degree in quantitative discipline

Job description

• A university degree from a nationally recognized/certified university in a quantitative discipline (Computer Science, Engineering, Statistics, Operations Research, etc.) with substantial computer science content and 2 years of specific experience, or at least 4 years of experience similar to the tasks described in the Statement of Work and relevant industry-recognized certifications ;
• Knowledge and experience in analyzing various threat actor groups, attack patterns, and tactics, techniques, and procedures (TTPs) to produce actionable threat intelligence that enables network and host defenses with demonstrable impact ;
• Experience with and knowledge of the intelligence lifecycle, analytical tradecraft, and frameworks such as MITRE ATT&CK.

Duties/role:

• Supporting the work of the Cyber Threat Analysis Branch, conducting research into threat actors’ tactics, techniques, and procedures (TTPs), and creating accurate, actionable, and relevant technical reporting of interest to the Alliance ;
• Creating scripts and queries for accurately and automatically tracking threat actor infrastructure and tools using commercial and open-source information and tools;
• Writing technical threat intelligence products, including detection signatures, to aid network defenders in network defence , threat hunting, and adversary emulation efforts .