cyber threat intelligence analyst

Andersen; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Stable salary and benefits

Educational platforms access

Mentoring and onboarding

Job summary

HireHi ищет опытного специалиста по киберразведке для сбора, анализа и корреляции угроз, а также поддержки SOC/SIEM в международной среде. Ваша задача — выявлять угрозы, связывать их с действиями акторов и готовить детальные briefing-материалы.

Кандидат должен иметь 5+ лет опыта в кибербезопасности, владеть платформами РИ, такими как MISP/OpenCTI, и свободно работать с MITRE ATT&CK. Ожидается высокий уровень английского и возможность работать в международной компании с ростом.

Qualifications

• 5+ лет кибербезопасности, включая не менее 3 лет в роли CTI
• Работа с платформой разведки угроз (MISP, OpenCTI и др)
• Сильное знание MITRE ATT&CK и Cyber Kill Chain
• Опыт перевода разведданных в детекции в SOC/SIEM
• Уровень английского—выше среднего, требуется проверка биографии

Responsibilities

• Сбор, анализ и корреляция данных об угрозах из открытых и коммерческих источников
• Отслеживание аттак, к кампаний и TTP, релевантных международным организациям
• Подготовка стратегических, операционных и тактических отчетов для аудитории
• Картирование угроз к MITRE ATT&CK и разработка детект-кейсов совместно с SOC/SIEM
• Управление IOCs и их жизненным циклом в TIP и обогащение тревог SOC
• Поддержка инцидент-реагирования с атрибуцией акторов и контекстом
• Обмен разведданными с партнерами в рамках протоколов TLP

Skills

Threat intelligence

CTI analyst

MITRE ATT&CK proficiency

OSINT research

Incident response support

Tools

MISP

OpenCTI

ThreatConnect

Anomali

Recorded Future

Job description

Описание

The customer provides digital infrastructure, cloud services, cybersecurity, data-driven solutions, and managed IT support. It helps organizations modernize complex technology environments, strengthen security, and improve the reliability and scalability of digital operations. The project delivers cybersecurity and digital services to international organizations and strengthens vulnerability management across a large, heterogeneous, multi-tenant environment.

Задачи

• Collect, analyze, and correlate threat intelligence from open, commercial, and community sources, including OSINT, ISACs, and vendor feeds


• Track threat actors, campaigns, and TTPs relevant to international organizations, including state-sponsored groups


• Produce strategic, operational, and tactical intelligence reports and briefings for technical and management audiences


• Map threats to MITRE ATT&CK and develop detection use cases with SOC and SIEM teams


• Manage IOCs and their lifecycle in the TIP, and enrich SOC alerts and incident investigations


• Support incident response with actor attribution and context


• Share intelligence with partner organizations under agreed TLP protocols

Требования

• At least 5 years of cybersecurity experience, including at least 3 years in a dedicated CTI role


• Hands-on experience with a threat intelligence platform such as MISP, OpenCTI, ThreatConnect, Anomali, or Recorded Future


• Strong command of MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain


• Experience conducting OSINT research and analyzing malware and phishing campaigns at indicator and TTP level


• Experience turning intelligence into detections with a SOC or SIEM team


• Clean professional records and willingness to undergo background verification


• English at Upper-Intermediate level or above


• Будет плюсом: GCTI, CTIA, or GCIH certifications, experience with STIX/TAXII, YARA, or Sigma, experience in a public sector, international organization, NGO, or financial sector environment, Python scripting for automation and data enrichment, French, Spanish, Arabic, Russian, or Chinese

Условия

• Stable and competitive salary and an extensive benefits package


• Access to educational platforms, seminars, and learning resources


• Mentoring and onboarding systems


• Transparent performance reviews and assessments, with opportunities to grow as a specialist or manager


• The company has been growing annually by 60–100% for the past four years


• The company has been strengthening its expertise since 2007 and has a knowledge base and resource management institution