Cyber Threat Intelligence Analyst

Hornetsecurity; Lille; Sur place; EUR 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Health insurance (AXA)

Sports and wellness benefits (company)

Meal vouchers (€10/day) with employer€

Public transport reimbursed

International exchange program

Résumé du poste

Hornetsecurity is seeking a Threat Intelligence Analyst in France to investigate threats detected for customers, gathering TTPs, IoCs, and tools used. You will craft concrete action plans for response and respond in critical incidents, leveraging email ecosystem knowledge and networking expertise to analyze malicious campaigns.

You will monitor threat intel sources, analyze malware, phishing campaigns, and APTs; report trends and provide predictive insights to anticipate attacks.

Qualifications

• Understanding cybersecurity concepts including CIA triad, vulnerability management, APTs, and frameworks like NIST, ISO 27001, MITRE ATT&CK.
• Experience with threat hunting using tools such as Clickhouse or Splunk for data analysis.
• Ability to analyze large datasets and identify patterns in security telemetry.
• Proficiency with threat intel platforms like OpenCTI, MISP, or ThreatConnect.
• Strong knowledge of network protocols and packet analysis (TCP/IP, DNS, HTTP/HTTPS).
• Scripting and automation using Python and Bash.

Responsabilités

• Continuously monitor and analyze data from threat intel sources to identify cyber threats and collect TTPs and IoCs.
• Conduct in-depth analysis of threats targeting customers, including malware, phishing, and APTs.
• Identify trends and report on patterns to help anticipate future attacks.
• Prepare and present detailed threat intel reports to technical and non-technical stakeholders.
• Support lab communications in English and increase international visibility.
• Deliver briefings and presentations in English for customers or partners.
• Represent the Lab during customer or partner meetings.
• Contribute to threat intel briefings, webinars, and demos.
• Ensure outputs are shareable with international stakeholders.
• Collaborate with other teams to coordinate response efforts.

Connaissances

Threat hunting

Data analysis

Python scripting

Log analysis

OpenCTI

MISP

ThreatConnect

TCP/IP

Network protocols

English communication

Outils

Clickhouse

Splunk

OpenCTI

MISP

ThreatConnect

Description du poste

We are looking for talented individuals like you, ready to make a real difference in an environment where innovation is at the heart of everything we do. If you want to join a company where you can learn, innovate, and have a tangible impact, this is the place for you!

Join our Hornetsecurity Threat Intelligence Lab team in France and participate in Threat Hunting activities to enhance Cyber Threat Intelligence on a daily basis.

Your Job

You are focused on investigating threats detected to our customers to gather useful information such as Techniques, Tactics and Procedures (TTP), Indicators of compromises (IoC) and tools used. Thanks to your cyber expertise, helps in building concrete plan of action for Response. You response in critical situations for our customers. Drawing on your knowledge of the email ecosystem, you will apply your networking expertise and investigative mindset to analyze malicious email campaigns, uncover attack patterns, and identify emerging threats.

Main responsibilities:

• Continuously monitor and analyze data from various threat intelligence sources to identify potential cyber threats and vulnerabilities and collect TTP and IoCs.
• Conduct in-depth analysis of cyber threats targeting our customers, including malware, phishing campaigns, and advanced persistent threats (APTs).
• Identify and report on trends and patterns in cyber threats, providing predictive insights to help anticipate future attacks.
• Prepare and present detailed reports and briefings on threat intelligence findings to both technical and non-technical stakeholders.
• The analyst will support the Threat Intelligence Lab by strengthening English-language communication and international visibility.
• Deliver internal briefings and presentations in English.
• Represent the Threat Intelligence Lab during customer or partner presentations.
• Contribute to the preparation of threat intelligence briefings, webinars, and demos.
• Help ensure that threat intelligence outputs can be effectively shared with international stakeholders.
• Work closely with other teams to share intelligence and coordinate response efforts.

Your Profile

Technical Skills:

• Understanding of fundamental cybersecurity concepts, including the CIA triad (Confidentiality, Integrity, Availability), vulnerability management, Advanced Persistent Threats (APT), as well as security frameworks and standards such as NIST, ISO 27001 and MITRE ATT&CK.
• Skills in proactive threat hunting using tools like Clickhouse, Splunk, or other log analysis platforms.
• Ability to analyze large datasets and identify patterns.
• Proficiency with threat intelligence platforms such as OpenCTI, MISP or ThreatConnect.
• Proficiency in network protocols and packet analysis, with a deep understanding of TCP/IP, DNS, HTTP/HTTPS, and other relevant protocols.
• Skilled in scripting and automation using Python and Bash.
• Innovation: Ability to think creatively and propose innovative solutions to address emerging cyber threats and enhance cybersecurity capabilities.
• Resilience: Ability to stay calm under pressure, manage high-stress situations, and guide the team through challenging cybersecurity threats incidents.
• Threats management: Strong understanding of threats management principles, methodologies and responses.
• Communication and presentation: Excellent communication and presentation skills to convey complex cybersecurity concepts and findings to both technical and non-technical audiences.
• English, written and spoken, is required.
• International exchange program
• Health and life insurance coverage (AXA)
• Sports and wellness benefits (company subsidy)
• Meal vouchers worth €10 per day (including a €5.92 employer contribution from Hornetsecurity)
• 100% reimbursement of public transportation costs

Why Join Hornetsecurity?

• Be part of one of Europe’s leading cybersecurity companies.
• Thrive in an international, multicultural, and performance-driven environment.
• Join a learning-focused organization where you can rapidly develop your skills and advance your career.