Application Security Coordinator

Sept 2017 Branding; City Of London; On-site; GBP 65,000 - 90,000; Full time

Job summary

CLS is seeking a highly motivated, self-driven Cyber Threat Intelligence Analyst to join a global threat intelligence team in London, UK. The role reports to the Threat Intelligence Manager and involves technical research and intelligence analysis of threats relevant to our industry and related technologies.

Responsibilities include collecting, processing, and disseminating cyber threat intelligence, producing strategic and tactical intelligence products, and briefing senior leaders.

Qualifications

• Bachelor's degree in cybersecurity or related discipline.
• GIAC/GCTI or equivalent certification preferred.
• Experience with threat intelligence writing and reporting.
• Knowledge of MITRE ATT&CK and Kill Chain.
• Proficiency with Splunk and IOC/TP tooling.

Responsibilities

• Collects, processes, and disseminates cyber threat intelligence from multiple sources to create actionable results for internal stakeholders.
• Coordinate and produce strategic, operational, and tactical intelligence products for business units, technical teams, and executives.
• Provide situational awareness on current threat landscape and maintain knowledge of adversary activities including TTPs to brief team members and senior decision makers.
• Assess emerging threats against our operational environment and work with security teams for detection, mitigation, and remediation efforts.
• Perform trend and correlation of cyber intelligence for recommendation-based countermeasures.
• Support and engage in incident response investigations and threat hunting activities.
• Develop and refine Splunk queries to identify malicious activity.
• Identify process gaps and improvement opportunities.
• Support external intelligence sharing engagements with other financial institutions and government partners.

Skills

Threat analysis

OSINT gathering

Splunk

Threat intel platforms

Yara

STIX/TAXII

MITRE ATT&CK

Kill Chain

Malware analysis

Network forensics

Reverse engineering

Command line

Write effectively

Education

Bachelor's Degree in Cybersecurity

GIAC / GCTI certification

Tools

Splunk

Threat Intel Platforms

Yara

STIX/TAXII

Job description

CLS is seeking a highly motivated, self-driven Cyber Threat Intelligence Analyst to join a global threat intelligence team. The role will be located in London, UK. The position will report to the Threat Intelligence Manager and will involve technical research and intelligence analysis of threats relevant to our industry, business, and related technologies. The ideal candidate will be aware of industry trends and frameworks and how they could impact our business, including threat actor groups, their TTPs, intrusion activities, and geopolitical relevance.

Job Description

• Collects, processes, and disseminates cyber threat intelligence from varying sources, including open source reports, information sharing partners, and vendor reports to create actionable results for internal stakeholders
• Coordinate and produce strategic, operational, and tactical intelligence products for business units, technical teams, and executive stakeholders
• Provide situational awareness on current threat landscape and maintain knowledge of adversary activities including TTPs to brief team members and senior decision leaders
• Assess emerging threats against our operational environment and work in partnership with our security teams for detection, mitigation, and remediation efforts
• Perform trend and correlation of cyber intelligence for recommendation-based countermeasures
• Support and engage in incident response investigations and threat hunting activities
• Conduct research to develop and refine queries in Splunk for the purpose of identifying malicious activity
• Contribute to improving the process through identification of process gaps and improvement opportunities
• Support external intelligence sharing engagements with other financial institutions and government partners

Experience

• Senior-to-mid level experience in cyber intelligence analysis required (3 - 5 years' work experience)
• Deep knowledge of analytical tradecraft, intelligence analysis, writing techniques and methodologies, critical thinking skills, and open source intelligence gathering techniques
• Strong interpersonal skills and team focused
• Subject matter expertise in nation-states, advanced persistent threats, and cybercriminal organizations
• Experience with Splunk
• Experience with Threat Intelligence Platforms and tools including Yara, STIX/TAXII
• Experience with command line, packet analysis, network forensics, malware analysis or reverse engineering
• Experience with MITRE ATT&CK framework and Kill Chain
• Demonstrated strong writing skills; ability to convey complex technical and non-technical concepts

Qualifications/Certifications

• Bachelor's Degree in Cybersecurity studies, Intelligence Studies, International Relations, Economics, Computer Science, or related discipline
• Security certification such as SANS GIAC (or equivalent) ideally GCTI or working towards certification

Desired Skills

• Advanced Degree in related disciplines
• Professional fluency or greater in a non-English language is a plus