Cyber Threat Intelligence Analyst

UN Atlas; Brasília; Hybrid; BRL 90,000 - 150,000; Full time

Benefits offered by this job

Remote work

Job summary

UN Atlas is seeking a Cyber Threat Intelligence Analyst to lead collection, analysis, and dissemination of threat information for Brazil's judiciary security project.

You will collaborate with CNJ and UNDP teams, develop actionable intelligence, and coordinate with national and international CSIRTs. Proficiency in Python and CTI tools is valued.

This remote role offers engagement with security teams to strengthen institutional resilience and respond to evolving cyber threats.

Qualifications

• Master's or Bachelor's in a relevant field; advanced degrees a plus.
• 2+ years in cyber threat intelligence, preferably in public sector.
• Experience with CTI platforms and scripting (Python) a plus.

Responsibilities

• Lead cyber threat intelligence by collecting, analyzing, and disseminating insights.
• Engage with threat information-sharing networks and CSIRTs.
• Develop indicators of compromise and map to MITRE ATT&CK.
• Transform raw data into actionable intelligence for stakeholders.
• Support risk management and security posture improvements.

Skills

Cyber Threat Intelligence

Threat Analysis

MITRE ATT&CK

Python scripting

OpenCTI

MISP

IoC generation

Open-source intel

Education

Master's degree

Bachelor's degree

Tools

MISP

OpenCTI

Python

KQL

SPL

MITRE ATT&CK

Job description

Work arrangement Remote / Home-based

Organizational Context

The United Nations Development Programme (UNDP) partners with Brazil's National Council of Justice (CNJ) to enhance cybersecurity within the Brazilian Judiciary. This initiative, Project BRA/25/025, focuses on developing and implementing tools and strategies for cybersecurity, digital preservation, and information integrity to strengthen institutional security and improve judicial processes.

Job Purpose

The Cyber Threat Intelligence Analyst will lead the collection, analysis, and dissemination of cyber threat intelligence to anticipate risks, deepen understanding of threat actors and incidents, and bolster the resilience of Brazilian Judiciary institutions. This role is crucial for developing a proactive cyber defense posture, supporting operational security, and contributing to the overall security and efficiency of the justice system under Project BRA/25/025. The analyst will collaborate closely with CNJ and UNDP teams, producing actionable intelligence for technical teams and management, and facilitating cooperation with national and international cybersecurity bodies.

Responsibilities

The Cyber Threat Intelligence Analyst is responsible for leading cyber threat intelligence efforts, including collection, analysis, and dissemination, to anticipate risks and enhance the resilience of Judiciary institutions. Key duties involve engaging in threat information-sharing networks, producing intelligence for alerts and advisories, and cooperating with national and international CSIRTs. The role requires conducting advanced analyses of threat actors, motivations, and TTPs, transforming raw data into actionable intelligence, and supporting vulnerability prioritization. Additionally, the analyst will monitor various sources for threats, define intelligence requirements, produce indicators of compromise, collaborate with Blue Teams and Incident Response, and assess security coverage against frameworks like MITRE ATT&CK. The position also contributes to strategic risk management, security posture reviews, and integrating intelligence into capacity-building programs, while also developing and maintaining knowledge management systems and reporting standards.

Work Experience

Applicants with a Master's degree are not required to have professional work experience. Those with a Bachelor's degree must have a minimum of two years of experience in Cyber Threat Intelligence. Previous experience in a SOC, CSIRT/CERT, or dedicated threat intelligence team, particularly within the public sector or justice system, is desirable. Experience with CTI platforms, scripting languages (e.g., Python), and Brazilian cybersecurity regulations is also beneficial.

Skills

Strategic Thinking, Business Acumen, Human-centered Design, Project Management, Cyber and Data Privacy Security Risk Management, Advanced analysis of threat actors and TTPs, Intelligence production and dissemination, Threat monitoring (open source, dark web), Indicator of Compromise (IoC) generation, MITRE ATT&CK framework application, Scripting and query languages (Python, KQL, SPL), CTI platforms (MISP, OpenCTI), STIX/TAXII, TLP, OPSEC, Digital forensics, Report writing (technical and executive), Portuguese fluency.

What candidates and members are discussing

Be the first to add context around this opportunity. Ask something practical or share experience with this organization. Contributions can help future candidates long after the vacancy closes.