Senior Threat Intel: Attribution & Adversary Tracking

WTW group; Madrid; On-site; EUR 70,000 - 100,000; Full time

Job summary

WTW is seeking a Cyber Threat Intelligence professional to lead attribution and adversary tracking efforts. You will analyze infrastructure, malware, tooling and TTPs to attribute intrusions to threat actors and maintain actor dossiers aligned with MITRE ATT&CK and the Diamond Model.

You will collaborate with Incident Response, Threat Hunting, Detection Engineering and the SOC, producing clear intelligence reports and briefings for technical teams and business stakeholders.

Qualifications

• Minimum 5 years in cyber threat intelligence or related security field.
• Proven attribution and adversary tracking experience.
• Strong knowledge of MITRE ATT&CK, Diamond Model and Cyber Kill Chain.
• Excellent written and verbal communication; ability to translate findings for technical and business audiences.

Responsibilities

• Attribute intrusion activity to threat actors using infrastructure, malware, tooling and TTPs.
• Track adversaries over time and map behavior to MITRE ATT&CK and the Diamond Model.
• Collaborate with Incident Response, Threat Hunting, Detection Engineering and SOC to enrich investigations.

Skills

Threat attribution

Adversary profiling

Structured analytic techniques

MITRE ATT&CK knowledge

Python scripting

Education

Bachelor’s degree in cybersecurity or related field

Certs such as GCTI, GREM, GCFA a plus

Tools

Threat intel platforms

Passive DNS

Certificate transparency

Malware sandboxes

Job description

WTW is seeking a Cyber Threat Intelligence professional to lead attribution and adversary tracking efforts. You will analyze infrastructure, malware, tooling and TTPs to attribute intrusions to threat actors and maintain actor dossiers aligned with MITRE ATT&CK and the Diamond Model.

You will collaborate with Incident Response, Threat Hunting, Detection Engineering and the SOC, producing clear intelligence reports and briefings for technical teams and business stakeholders.