Mid-Level Information Security Analyst – Cyber Threat Intelligence

Jobtailor; Porto Alegre; Presencial; BRL 180 000 - 280 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a Cyber Threat Intelligence Analyst in Brazil to monitor, analyze, and report on threats targeting the financial and cooperative sectors. You will research threat actors, campaigns, and TTPs, develop IOCs, and help SOC and IR teams with context and detection rules.

The role requires a bachelor’s degree in information security or related field, experience in CTI/SOC, and familiarity with MITRE ATT&CK, Cyber Kill Chain, and related tools.

Qualificações

• Bachelor’s degree in Information Security, Computer Science, Information Systems or related fields.
• Experience in Cyber Threat Intelligence, SOC, Incident Response or related areas.
• Knowledge of MITRE ATT&CK, Cyber Kill Chain and the Diamond Model frameworks.
• Familiarity with malware analysis, phishing, ransomware and APT campaigns.
• Knowledge of protocols, networking and Windows/Linux operating systems.
• Experience with TIPs (Threat Intelligence Platforms) or CTI tools.
• Strong analytical skills and the ability to produce technical and executive reports.
• Knowledge of SIEM and enterprise security tools.
• Plus: experience in financial institutions or regulated environments.
• Plus: knowledge of Digital Risk Protection, Brand Protection and exposed surface monitoring.
• Plus: experience with Threat Hunting.
• Plus: experience with MISP, Anomali, Recorded Future, Flashpoint, CrowdStrike, Microsoft Defender Threat Intelligence, OpenCTI or similar tools.
• Preferred: certifications such as GCTI, CTIA, Security+, CySA+, GSEC or CISSP.

Responsabilidades

• Monitor and analyze threat information from open, closed and commercial sources.
• Produce tactical, operational and strategic reports on threats relevant to the business.
• Conduct research on threat actors, malicious campaigns, TTPs and emerging vulnerabilities.
• Develop and maintain indicators of compromise (IOCs) and detection rules.
• Correlate security events with intelligence to support the SOC and incident response teams.
• Map threats using MITRE ATT&CK, Cyber Kill Chain and the Diamond Model.
• Support security incident investigations and forensic analyses by providing threat context.
• Prepare executive briefings and intelligence advisories for different levels of the organization.
• Monitor threats targeting the financial sector, the cooperative sector or the company’s specific line of business.
• Participate in intelligence‑sharing communities such as FS-ISAC, CERT.br, FIRST and other relevant forums.
• Contribute to the improvement of processes, procedures and automations related to threat intelligence.

Conhecimentos

Cyber Threat Intelligence

Analytical thinking

Report writing

Threat hunting

Phishing detection

Ransomware response

TTPs analysis

SIEM knowledge

Networking protocols

Windows/Linux OS

Financial sector knowledge

Formação académica

Bachelor's degree in Information Security, Computer Science, Information Systems or related fields

Ferramentas

Threat Intelligence Platforms (TIPs)

MISP

Anomali

Recorded Future

Flashpoint

CrowdStrike

Microsoft Defender Threat Intelligence

OpenCTI

Descrição da oferta de emprego

• Monitor, collect and analyze threat information from open, closed and commercial sources


• Produce tactical, operational and strategic reports on threats relevant to the business


• Conduct research and analysis on threat actors, malicious campaigns, TTPs (Tactics, Techniques and Procedures) and emerging vulnerabilities


• Develop and maintain indicators of compromise (IOCs) and detection rules


• Correlate security events with intelligence to support the SOC and incident response teams


• Map threats using frameworks such as MITRE ATT&CK, Cyber Kill Chain and the Diamond Model


• Support security incident investigations and forensic analyses by providing threat context


• Prepare executive briefings and intelligence advisories for different levels of the organization


• Monitor threats targeting the financial sector, the cooperative sector or the company’s specific line of business


• Participate in intelligence‑sharing communities such as FS-ISAC, CERT.br, FIRST and other relevant forums


• Contribute to the improvement of processes, procedures and automations related to threat intelligence

Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems or related fields


• Experience in Cyber Threat Intelligence, SOC, Incident Response or related areas


• Knowledge of MITRE ATT&CK, Cyber Kill Chain and the Diamond Model frameworks


• Familiarity with malware analysis, phishing, ransomware and APT campaigns


• Knowledge of protocols, networking and Windows/Linux operating systems


• Experience with TIPs (Threat Intelligence Platforms) or CTI tools


• Strong analytical skills and the ability to produce technical and executive reports


• Knowledge of SIEM and enterprise security tools


• Plus: experience in financial institutions or regulated environments


• Plus: knowledge of Digital Risk Protection (DRP), Brand Protection and exposed surface monitoring


• Plus: experience with Threat Hunting


• Plus: experience with MISP, Anomali, Recorded Future, Flashpoint, CrowdStrike, Microsoft Defender Threat Intelligence, OpenCTI or similar tools


• Preferred: certifications such as GCTI, CTIA, Security+, CySA+, GSEC or CISSP

Core Competencies

Demonstrates expertise in Cyber Threat Intelligence, including the ability to analyze threat information, produce detailed reports, and support incident response efforts. Proficient in utilizing frameworks such as MITRE ATT&CK and Cyber Kill Chain to map and understand threats targeting specific sectors.

Highest-signal resume keywords

• Cyber Threat Intelligence


• MITRE ATT&CK Framework


• Incident Response


• Threat Intelligence Platforms


• Analytical Skills

ATS Optimization Keywords

Hard Skills

• Threat Analysis


• Malware Analysis


• Phishing Detection


• Ransomware Response


• Tactics, Techniques and Procedures (TTPs)


• Indicators of Compromise (IOCs)


• Security Information and Event Management (SIEM)


• Networking Protocols


• Windows Operating System


• Linux Operating System

Soft Skills

• Analytical Thinking


• Report Writing


• Communication Skills

Certifications & Qualifications

• GCTI


• CTIA


• Security+


• CySA+


• GSEC


• CISSP

Industry Keywords

• Financial Sector


• Cooperative Sector


• Digital Risk Protection (DRP)


• Brand Protection


• Exposed Surface Monitoring

Tools & Technologies

• Threat Intelligence Platforms (TIPs)


• MISP


• Anomali


• Recorded Future


• Flashpoint


• CrowdStrike


• Microsoft Defender Threat Intelligence


• OpenCTI