Cyber Threat Intelligence Analyst

CEVA Logistics; Makati; On-site; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

HMO w/ 2 free dependents from day 1 of

Group Life Insurance

Medical Reimbursement (includes eyegas

Leave: Sick/Vacation/Bereavement

Birthday token

Annual Performance Reviews w/ salary

Annual Company Performance Bonus

Retirement Fund

Job summary

CEVA Logistics in Makati is seeking a Cyber Threat Intelligence Analyst for the Cyber Defense Center. You will monitor blogs, the web, and political news to contextualize cyber threats and provide actionable intelligence for CEVA's security posture.

You will support DFIR and investigations, develop threat intel-driven briefings for internal and partner use, and contribute to CERT/SOC collaboration. A strong background in threat frameworks and relevant certifications is required.

Qualifications

• Bachelor's degree in Information Technology or related fields.
• 5+ years of SOC/CERT experience.
• Strong understanding of cyber threat intelligence frameworks and Mitre ATT&CK.
• Familiar with ISO 27000 and NIST security frameworks.
• Relevant cybersecurity credentials (SANS/GIAC, EC Council, CISSP, or CISA).
• Ability to communicate security messages to management and technical staff.
• Experience in the transport/shipping/logistics is a plus.

Responsibilities

• Monitor blogs, research leaks, and analyze threats from the web.
• Monitor clear, deep, and dark web for data and threats.
• Produce threat intelligence-driven context and IoCs.
• Support DFIR, fraud and legal investigations.
• Contribute to CERT/SOC collaboration and ISAC efforts.
• Participate in on-call rotations and off-hours emergencies.
• Prepare monthly metrics and reports.
• Lead threat hunting based on past events.

Skills

Cyber threat intelligence

Threat analysis

Communication to management

Education

Bachelor's degree in Information Technology or related fields

Tools

SANS/GIAC certifications

EC Council certifications

CISSP

CISA

Job description

WHAT ARE YOU GOING TO DO?

As Cyber Threat Intelligence Analyst within the Cyber Defense Center, you will:

• Watch cybersecurity blogs, research and leaks;
• Monitor the clear, the deep and the dark web for data and threats;
• Interpret political and economical news and events with a cyber point of view;

Watch the global cyber threat landscape:

• Compile attacker Tactics, Techniques and Procedures (TTPs);
• Support Digital Forensic and Incident Response (DFIR), fraud and legal investigations;
• Improve monitoring and alerting;
• Enable threat hunting based on past events;

Understand threat actors and anticipate future threats:

• Follow and watch threat actor’s activities and operations;
• Extrapolate threat actor’s objectives, methodologies and targets;
• Enable pro-active threat assessments;

Create threat intelligence-driven products:

• Contextualized security and threat landscape briefings for our organization and partner
• ISACs;
• Analysis of threats and attacks to a business function & assets;
• Recommendations on how to position our cyber defenses based on expected attacks;
• Compile and contextualize of Indicators of Compromise (IoCs);

Other responsibilities:

• Contribute to on-call rotation and be available for punctual off-hours emergency work;
• Participate to information sharing and collaboration (ISAC) efforts;
• Participate to CERT/SOC transversal collaboration activities;
• Participate to projects, improvements and compliance efforts related to CERT matters;
• Participate to monthly metrics;

WHAT ARE WE LOOKING FOR?

• Bachelor's degree in Information Technology or related fields.
• 5 or more years of experience in a role with similar responsibilities, including CERT or SOC.
• Excellent understanding of Cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, Mitre Att&ck.
• Good understanding of information security frameworks (e.g. : ISO 27000, NIST framework).
• Hold relevant cybersecurity industry credentials, including Technical SANS/GIAC certifications, Technical EC Council certifications, CISSP, and/or CISA.
• Able to convey an information security message to an organization’s management and technical staff.
• Experience in the transport/shipping/logistics is a plus.

WHAT DO WE HAVE TO OFFER?

• HMO w/ 2 free dependents from day 1 of hiring
• Group Life Insurance
• Medical Reimbursement (includes eyeglasses)
• Service Incentive Leave + Sick Leave + Vacation Leave + Bereavement Leave
• Birthday token
• Annual Performance Reviews w/ a chance of a salary alignment
• Annual Company Performance Bonus
• Retirement Fund

ABOUT TOMORROW

We value your professional and personal growth. That’s why we share plenty of career opportunities for you to thrive within CEVA. Join CEVA for a challenging career.