Threat Intelligence Analyst: Threat Hunting & Analysis

Hornetsecurity; Lille; Sur place; EUR 65 000 - 90 000; Plein temps

Avantages offerts par ce poste

Health insurance (AXA)

Sports and wellness benefits (company)

Meal vouchers (€10/day) with employer€

Public transport reimbursed

International exchange program

Résumé du poste

Hornetsecurity is seeking a Threat Intelligence Analyst in France to investigate threats detected for customers, gathering TTPs, IoCs, and tools used. You will craft concrete action plans for response and respond in critical incidents, leveraging email ecosystem knowledge and networking expertise to analyze malicious campaigns.

You will monitor threat intel sources, analyze malware, phishing campaigns, and APTs; report trends and provide predictive insights to anticipate attacks.

Qualifications

• Understanding cybersecurity concepts including CIA triad, vulnerability management, APTs, and frameworks like NIST, ISO 27001, MITRE ATT&CK.
• Experience with threat hunting using tools such as Clickhouse or Splunk for data analysis.
• Ability to analyze large datasets and identify patterns in security telemetry.
• Proficiency with threat intel platforms like OpenCTI, MISP, or ThreatConnect.
• Strong knowledge of network protocols and packet analysis (TCP/IP, DNS, HTTP/HTTPS).
• Scripting and automation using Python and Bash.

Responsabilités

• Continuously monitor and analyze data from threat intel sources to identify cyber threats and collect TTPs and IoCs.
• Conduct in-depth analysis of threats targeting customers, including malware, phishing, and APTs.
• Identify trends and report on patterns to help anticipate future attacks.
• Prepare and present detailed threat intel reports to technical and non-technical stakeholders.
• Support lab communications in English and increase international visibility.
• Deliver briefings and presentations in English for customers or partners.
• Represent the Lab during customer or partner meetings.
• Contribute to threat intel briefings, webinars, and demos.
• Ensure outputs are shareable with international stakeholders.
• Collaborate with other teams to coordinate response efforts.

Connaissances

Threat hunting

Data analysis

Python scripting

Log analysis

OpenCTI

MISP

ThreatConnect

TCP/IP

Network protocols

English communication

Outils

Clickhouse

Splunk

OpenCTI

MISP

ThreatConnect

Description du poste

Hornetsecurity is seeking a Threat Intelligence Analyst in France to investigate threats detected for customers, gathering TTPs, IoCs, and tools used. You will craft concrete action plans for response and respond in critical incidents, leveraging email ecosystem knowledge and networking expertise to analyze malicious campaigns.

You will monitor threat intel sources, analyze malware, phishing campaigns, and APTs; report trends and provide predictive insights to anticipate attacks.