Senior Intelligence Analyst

Google LLC; Kuwait City; On-site; KWD 37,000 - 56,000; Full time

Job summary

Google LLC’s Mandiant Intelligence unit offers an embedded CTI role focused on Advanced Intelligence Access. You will be onsite with a customer four to five days a week, leveraging CTI to help network defenders and customer teams to defend threats. You will work with a global team and access leading tooling and data.

The role concentrates on integrating CTI into the customer’s security processes and technologies, including SIEM and TIP systems, to deliver priority intelligence requirements.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• 5 years in government or military environment leveraging CTI for network/host/log analysis to detect and respond to threats.
• Experience leveraging CTI to describe, track and develop intel on Advanced Persistent Threats.
• Experience with network IDS monitoring, EDR, SIEM and SOAR integration; contributing CTI into TIP.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, TTPs, attacker motivations and trends.
• Track and contribute CTI analysis for customer priority threat concerns.
• Enable customer SOC analysts to deploy and leverage CTI.
• Generate CTI and analyze customer data to build automated analytical workflows.
• Write intelligence reporting for customer requirements for analysts or senior readers.

Skills

CTI for network

Threat intel

APTs intelligence

Education

Bachelor's degree in CS/IT/cybersecurity

Tools

SIEM

SOAR

EDR

IDS monitoring

Threat Intelligence Platform

Job description

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  
• 5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.
  
• Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats
  
• Experience of network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.
  

Preferred qualifications:

• Experience of conducting or supporting incident response and investigations within enterprise environments.
  
• Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.
  
• Understanding of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
  

About the job

This is an exciting opportunity to join Mandiant Intelligence, delivering our Advanced Intelligence Access (AIA) service. Being onsite and embedded with a customer four - five days per week, you will leverage Mandiant's cyber threat intelligence to enable network defenders and customer CTI teams to defend against the threats they face. You will be supported and enabled by a fantastic network of colleagues and specialists right across Mandiant Intelligence and will contribute to Mandiant's wealth of deep technical skills and CTI knowledge. You will have access to industry leading tooling and data and will work towards delivering on customer priority intelligence requirements.

This role is focused on supporting the customer's CTI defensive mission. Helping their SOC, threat hunters, detection engineers, and CTI analysts counter threats and enable the safe and secure running of their networks and operations.

As the Advanced Intelligence Access (AIA) Integrator for a customer, you will be responsible for performing strategic, and operational research and analysis of adversarial cyber threats. You will correlate intelligence to develop understandings of tracked threat activity and support the integration of CTI into customer's security processes and technologies, including SIEM and TIP systems.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends.
• Track and contribute CTI analysis within Mandiant, of customer's priority threat concerns.
• Enable customer SOC analysts to deploy and leverage Mandiant's CTI.
• Generate CTI, and perform analysis of customer data, taking their bespoke sources to identify threat activity, or to build and automate analytical workflows.
• Write intelligence reporting against customer requirements, appropriate for their intelligence analysts or senior readers.

Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy , Know your rights: workplace discrimination is illegal , Belonging at Google , and How we hire .

Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.

Equity is granted exclusively and discretionarily by Alphabet Inc. on the basis of an agreement concluded between you and Alphabet Inc. Alphabet Inc. is your sole contractual partner with respect to equity grants. GSU grants are not guaranteed, are discretionary, are subject to approval by the Alphabet Inc. board of directors or its delegate, the terms of the relevant Alphabet Inc. stock plan, and your grant agreement. They have no impact on statutory payments. Current or past grants do not confer an acquired right.