Cyber Threat Intelligence Analyst_ 5+ years

Atyeti; India; A distancia; INR 2.000.000 - 3.500.000; Jornada completa

Descripción de la vacante

Atyeti Inc. is seeking a Senior Cyber Threat Intelligence Analyst to monitor and analyze evolving cyber threats, track threat actors, and produce timely intelligence products for technical and executive audiences.

The role covers intelligence operations, dissemination, and collaboration with Security Operations, Risk, and other teams to strengthen defenses. Strong analytic writing and industry certifications are valued.

Formación

• 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.
• Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
• Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats
• Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
• Strong understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
• Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
• Strong analytical, communication, and technical writing skills.

Responsabilidades

• Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability exploitation trends.
• Track threat actors and provide analysis on their capabilities, targeting, infrastructure, and TTPs.
• Conduct technical investigations using threat intelligence, OSINT, and infrastructure analysis techniques.
• Correlate intelligence from multiple sources and assess potential impact to the organization.
• Lead IOC collection, enrichment, validation, and lifecycle management activities.
• Maintain intelligence records, indicators, and threat artifacts within the organization's Threat Intelligence Platform (TIP).
• Develop and disseminate actionable threat advisories, intelligence reports, and emerging threat notifications.
• Support intelligence-sharing efforts with internal stakeholders and trusted external partners.
• Produce tactical, operational, and strategic intelligence products for technical and business audiences.
• Deliver intelligence briefings to security teams, leadership, and other stakeholders.
• Provide threat-informed recommendations that improve organizational awareness and preparedness.
• Serve as a subject matter expert on adversary activity, emerging threats, and cyber risk trends.
• Provide intelligence support during cybersecurity investigations and incident response activities.
• Perform adversary-focused analysis to support incident scoping, attribution, and impact assessments.
• Partner with Security Operations, Vulnerability Management, and Risk teams to provide threat context and intelligence insights.
• Identify intelligence gaps, emerging risks, and opportunities to strengthen defensive capabilities.

Conocimientos

Threat intelligence

Threat hunting

MITRE ATT&CK

Analytical writing

Herramientas

Anomali

ThreatQ

ThreatConnect

OpenCTI

MISP

Shodan

VirusTotal

Descripción del empleo

Role & responsibilities

Senior Cyber Threat Intelligence Analyst

Key Responsibilities

Threat Monitoring & Intelligence Analysis

• Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability exploitation trends.
• Track threat actors and provide analysis on their capabilities, targeting, infrastructure, and TTPs.
• Conduct technical investigations using threat intelligence, OSINT, and infrastructure analysis techniques.
• Correlate intelligence from multiple sources and assess potential impact to the organization.

Intelligence Operations & Dissemination

• Lead IOC collection, enrichment, validation, and lifecycle management activities.
• Maintain intelligence records, indicators, and threat artifacts within the organization's Threat Intelligence Platform (TIP).
• Develop and disseminate actionable threat advisories, intelligence reports, and emerging threat notifications.
• Support intelligence-sharing efforts with internal stakeholders and trusted external partners.

Intelligence Reporting & Stakeholder Engagement

• Produce tactical, operational, and strategic intelligence products for technical and business audiences.
• Deliver intelligence briefings to security teams, leadership, and other stakeholders.
• Provide threat-informed recommendations that improve organizational awareness and preparedness.
• Serve as a subject matter expert on adversary activity, emerging threats, and cyber risk trends.

Incident Response & Security Support

• Provide intelligence support during cybersecurity investigations and incident response activities.
• Perform adversary-focused analysis to support incident scoping, attribution, and impact assessments.
• Partner with Security Operations, Vulnerability Management, and Risk teams to provide threat context and intelligence insights.
• Identify intelligence gaps, emerging risks, and opportunities to strengthen defensive capabilities.

Required Qualifications

• 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.
• Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
• Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats
• Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
• Strong understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
• Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
• Strong analytical, communication, and technical writing skills.

Desired Skills

• Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.
• Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.
• Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.
• Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.
• Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.
• Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.
• Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.