Threat Intelligence Lead: CTI for SOC & Threat Hunting

Google LLC; Kuwait City; On-site; KWD 37,000 - 56,000; Full time

Job summary

Google LLC’s Mandiant Intelligence unit offers an embedded CTI role focused on Advanced Intelligence Access. You will be onsite with a customer four to five days a week, leveraging CTI to help network defenders and customer teams to defend threats. You will work with a global team and access leading tooling and data.

The role concentrates on integrating CTI into the customer’s security processes and technologies, including SIEM and TIP systems, to deliver priority intelligence requirements.

Qualifications

• Bachelor's degree in a relevant field or equivalent practical experience.
• 5 years in government or military environment leveraging CTI for network/host/log analysis to detect and respond to threats.
• Experience leveraging CTI to describe, track and develop intel on Advanced Persistent Threats.
• Experience with network IDS monitoring, EDR, SIEM and SOAR integration; contributing CTI into TIP.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, TTPs, attacker motivations and trends.
• Track and contribute CTI analysis for customer priority threat concerns.
• Enable customer SOC analysts to deploy and leverage CTI.
• Generate CTI and analyze customer data to build automated analytical workflows.
• Write intelligence reporting for customer requirements for analysts or senior readers.

Skills

CTI for network

Threat intel

APTs intelligence

Education

Bachelor's degree in CS/IT/cybersecurity

Tools

SIEM

SOAR

EDR

IDS monitoring

Threat Intelligence Platform

Job description

Google LLC’s Mandiant Intelligence unit offers an embedded CTI role focused on Advanced Intelligence Access. You will be onsite with a customer four to five days a week, leveraging CTI to help network defenders and customer teams to defend threats. You will work with a global team and access leading tooling and data.

The role concentrates on integrating CTI into the customer’s security processes and technologies, including SIEM and TIP systems, to deliver priority intelligence requirements.