Cyber Threat Intelligence Analyst

CEVA Logistics; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

HMO w/ 2 free dependents from day 1 of

Group Life Insurance

Medical Reimbursement (eyeglasses)

Leave entitlements

Annual Bonus

Retirement Fund

Job summary

CEVA Logistics is seeking a Cyber Threat Intelligence Analyst to watch and understand threats impacting the logistics sector. You will monitor diverse threat sources, interpret events with a cyber lens, and develop threat intelligence-driven products for our cyber defense center.

The role reports to the CTI Lead and involves collaboration with CERT/SOC teams, ISACs, and incident response activities. A strong security credential set and logistics experience are valued.

Qualifications

• Bachelor's degree in Information Technology or related fields is required.
• 5+ years of experience in a role with similar responsibilities, including CERT or SOC.
• Excellent understanding of cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, MITRE ATT&CK.
• Good understanding of information security frameworks (ISO 27000, NIST).
• Hold relevant cybersecurity industry credentials (CISSP, CISA, SANS/GIAC, EC Council).
• Able to convey information security messages to management and technical staff.

Responsibilities

• Watch cybersecurity blogs, research and leaks.
• Monitor the clear, deep, and dark web for data and threats.
• Interpret political and economical news with a cyber view.
• Compile attacker TTPs and support DFIR, fraud and legal investigations.
• Improve monitoring and alerting; enable threat hunting based on past events.
• Follow threat actor activities, extrapolate objectives and methods.
• Provide threat intelligence-driven context for organization and partners.
• Contribute to ISACs and CERT/SOC collaboration activities.
• Produce security briefings and risk assessments for business functions.

Skills

Threat intelligence

Threat hunting

Cybersecurity frameworks

Communication

ISAC collaboration

Education

Bachelor's degree in Information Technology or related fields

Certifications (CISSP/CISA/SANS-GIAC/EC Council)

Job description

We are looking for a Cyber Threat Intelligence (CTI) Analyst profile to watch and understand the threats

that can affect our industry and organization, anticipate future threats, and create threat intelligence-driven products.

The Cyber Threat Intelligence Analyst reports to the CTI Lead.

WHAT ARE YOU GOING TO DO?

As Cyber Threat Intelligence Analyst within the Cyber Defense Center, you will:

• Watch cybersecurity blogs, research and leaks;
• Monitor the clear, the deep and the dark web for data and threats;
• Interpret political and economical news and events with a cyber point of view;

Watch the global cyber threat landscape:

• Compile attacker Tactics, Techniques and Procedures (TTPs);
• Support Digital Forensic and Incident Response (DFIR), fraud and legal investigations;
• Improve monitoring and alerting;
• Enable threat hunting based on past events;

Understand threat actors and anticipate future threats:

• Follow and watch threat actor’s activities and operations;
• Extrapolate threat actor’s objectives, methodologies and targets;
• Enable pro-active threat assessments;

Create threat intelligence-driven products:

• Contextualized security and threat landscape briefings for our organization and partner
• ISACs;
• Analysis of threats and attacks to a business function & assets;
• Recommendations on how to position our cyber defenses based on expected attacks;
• Compile and contextualize of Indicators of Compromise (IoCs);

Other responsibilities:

• Contribute to on-call rotation and be available for punctual off-hours emergency work;
• Participate to information sharing and collaboration (ISAC) efforts;
• Participate to CERT/SOC transversal collaboration activities;
• Participate to projects, improvements and compliance efforts related to CERT matters;
• Participate to monthly metrics;

WHAT ARE WE LOOKING FOR?

• Bachelor's degree in Information Technology or related fields.
• 5 or more years of experience in a role with similar responsibilities, including CERT or SOC.
• Excellent understanding of Cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, Mitre Att&ck.
• Good understanding of information security frameworks (e.g. : ISO 27000, NIST framework).
• Hold relevant cybersecurity industry credentials, including Technical SANS/GIAC certifications, Technical EC Council certifications, CISSP, and/or CISA.
• Able to convey an information security message to an organization’s management and technical staff.
• Experience in the transport/shipping/logistics is a plus.

WHAT DO WE HAVE TO OFFER?

• HMO w/ 2 free dependents from day 1 of hiring
• Group Life Insurance
• Medical Reimbursement (includes eyeglasses)
• Service Incentive Leave + Sick Leave + Vacation Leave + Bereavement Leave
• Birthday token
• Annual Performance Reviews w/ a chance of a salary alignment
• Annual Company Performance Bonus
• Retirement Fund

ABOUT TOMORROW

We value your professional and personal growth. That’s why we share plenty of career opportunities for you to thrive within CEVA. Join CEVA for a challenging career.