Threat Intelligence Specialist | Hybrid Cyber Defense

ON2IT; Netherlands; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

International impact

Autonomy & trust

Continuous learning

Job summary

ON2IT is seeking a CTI Specialist to analyze advanced threats, translate intelligence into actions, and support SOC/CSIRT to proactively protect clients. You will work within a Zero Trust framework and help improve cybersecurity posture across multiple industries.

You will leverage platforms like MISP/OpenCTI, apply MITRE ATT&CK, and contribute to automation, advisories, and IOCs. English proficiency is required; hybrid work from NL is offered.

Qualifications

• Has an IT security degree or equivalent experience in cybersecurity.
• At least 2 years in CTI/SOC/CSIRT or similar.
• Holds recognized cybersecurity certifications (see required list).
• Familiar with STIX/TAXII, MITRE ATT&CK, YARA, Sigma and TLP.

Responsibilities

• Identify and assess vulnerabilities, threats, and relevant intelligence for ON2IT and clients.
• Enhance threat intel sharing processes internally and externally.
• Support SOC and CSIRT with threat intel, incident response, and forensic analysis.
• Maintain and optimize Threat Intelligence Platforms (e.g., MISP, OpenCTI).
• Develop automation to improve CTI efficiency.
• Draft advisories and intel briefings on vulnerabilities and threats.
• Extract and manage Indicators of Compromise from reports.

Skills

CTI experience

Threat intelligence analysis

Communication skills

English proficiency

Education

IT degree (cybersecurity or CS)

Tools

CompTIA Security+

CEH

GCIH

GCTI

GCFA

SANS FOR578

FOR508

STIX/TAXII

MITRE ATT&CK

YARA

Sigma

Job description

ON2IT is seeking a CTI Specialist to analyze advanced threats, translate intelligence into actions, and support SOC/CSIRT to proactively protect clients. You will work within a Zero Trust framework and help improve cybersecurity posture across multiple industries.

You will leverage platforms like MISP/OpenCTI, apply MITRE ATT&CK, and contribute to automation, advisories, and IOCs. English proficiency is required; hybrid work from NL is offered.