Threat Intelligence Analyst – Security and Risk Management team (W/M/NB)

Ubisoft Entertainment; Paris; Sur place; EUR 45 000 - 65 000; Plein temps

Résumé du poste

A global gaming company is seeking a Threat Intelligence Analyst to bolster their Security & Risk Management Team. The successful candidate will analyze cyber threats and provide actionable intelligence to enhance security measures. This role requires strong expertise in cybersecurity, bilingual proficiency in French and English, and the ability to work independently. Benefits include profit-sharing, healthcare, and a hybrid work model.

Prestations

Profit Sharing

25 paid time off days

12 additional paid days off

50% paid Navigo pass

Lunch vouchers (9€/day)

Healthcare for you and your family

Gym available in the building

Qualifications

• Experience in information security with Cyber Threat Intelligence.
• Outstanding written and oral communication skills.
• Ability to translate complex information sets into actionable recommendations.
• Strong understanding of the intelligence cycle and collection requirements.
• Experience collecting and analyzing raw information for intelligence reports.
• Understanding of common attack techniques.
• Experience tracking APTs and criminal actor groups.
• Fluency in French & English.

Responsabilités

• Utilize threat intelligence to protect Ubisoft and its customers.
• Act as a Subject Matter Expert for internal and external teams.
• Design scopes of solutions based on security best practices.
• Contribute to improvements in security guidelines and procedures.
• Communicate effectively to support security improvements.

Connaissances

Information Security

Cyber Threat Intelligence

Digital Forensics

Incident Response

Analytical Skills

Communication Skills

Bilingual (French & English)

Outils

Mitre Att&ck framework

Diamond Threat Model

Cyber Kill Chain

Description du poste

Threat Intelligence Analyst – Security and Risk Management team (W/M/NB)

Ubisoft is a global leader in gaming with teams across the world creating original and memorable gaming experiences, from Assassin’s Creed, Rainbow Six, to Just Dance and more. We believe diverse perspectives help both players and teams thrive. If you’re passionate about innovation and pushing entertainment boundaries, join our journey and help us create the unknown!

JOB DESCRIPTION

You will be joining Ubisoft within the Security & Risk Management Team – SRM, which is a global department across Europe, Asia and the Americas, as a Cyber Threat Intelligence (CTI) Analyst you will be responsible for collecting available information about cyber threats, analyzing the information to determine actionable intelligence to inform Security Operations and disseminate that intelligence in different ways to key stakeholders. You will report directly to the Threat Intelligence Team Lead, and will collaborate with team members from Security, IT, as well as Legal, Privacy, and Communications.

The Cyber Threat Intelligence Program is under construction, and we are looking for an experienced, self-driven analyst that can operate independently and contribute to the maturation of the program. The ideal candidate will seek to improve others while continuously learning and identifying ways to enhance the team’s analytical tradecraft. As, we’ve launched CERT-Ubisoft in 2020, you will have the opportunity also to exchange directly with other CERTs with the InterCERT & TF-CSIRT members.

Mission

• Monitor intelligences sources, identify actual and potential cyber threats to Gaming Industry but also follow APT & cybercrime groups
• Actively research emerging techniques leveraged by ATP actors, criminal enterprises, and others
• Work with other first line security teams to bring intelligence to threats and vulnerabilities
• Produce written tactical, operational, and strategic intelligence products
• Participate in security incident management for CTI analysis to search, enrich and document Threat actor profiles, infrastructures and TTPs used
• Participate in inter-team discussions and workshops with Security teams related to anticipation, detection, protection, and deception
• Participate in team meetings, innovations, roadmap, sources choices, PoCs and activity as required to fulfil role

Responsibilities

• Utilize threat intelligence to protect Ubisoft and its customers from threat actors
• Act as a Subject Matter Expert for SRM department with internal and external team
• Design the scope of solutions based on security best practices and industry standards
• Contribute to improvements in Ubisoft security guidelines, standards, and procedures
• Communicate effectively, guide, and support security improvements

Qualifications

• Experience in information security with Cyber Threat Intelligence, Digital Forensics, and/or Incident Response
• Outstanding written and oral communication skills
• Proven ability to translate complex information sets into actionable recommendations that can be utilized by the security teams to enhance our security posture
• A strong understanding with the intelligence cycle and collection requirements
• Experience utilizing the Diamond Threat Model, Mitre Att&ck framework or Cyber Kill Chain
• Experience collecting and analysing raw information to produce intelligence reports
• Understanding of common attack techniques such as reconnaissance, scanning, exploitation, pivoting, and persistence
• Experience tracking APTs and criminal actor groups
• French & English are required both orally and written

Skills and Knowledge

• Ability to work independently
• Expert understanding of cybersecurity principles
• Ability to think abstractly
• Significant attention to detail
• A natural desire and mindset to ask questions and investigate

Certifications (Optional)

• GCTI Certification/SANS FOR578
• GOSI Certification/SANS SEC487
• GCFA Certification/SANS FOR508
• Other certifications can be considered if deemed relevant

Additional Information

💰 Profit Sharing, yearly company saving plan. 25 paid time off + 12 additional paid days off. 50% of your Navigo pass is paid by the company, lunch vouchers (9€/day), healthcare for you and your family, and lots of Ubisoft additional perks.
📍 Our brand new office is located in Saint Mandé, (Metro line 1, Saint Mandé station). Gym available in the building.

We embrace a hybrid work model helping you stay connected with your team and aligned with business priorities, while giving you the opportunity to maintain your work-life balance. Please note that some roles are fully office-based and are not eligible for hybrid working.

Recruitment Process

[30 minutes] : phone call with a Recruiter
[60 minutes] : interview with the manager of the role and a Recruiter
[60 minutes] : we will send you a case study to prepare (we give you a full week to deliver 3-5 hours of work), you will then present the business case during a one-hour long visio presentation with the manager of the role and the Director of Security Operations