Threat Intelligence Analyst

Thales Group; Leça do Balio; Híbrido; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Thales Group in Portugal seeks a Threat Intelligence Analyst to monitor digital risk, analyze threats and produce strategic reports. The role collaborates with SOC, Incident Response and external partners to enrich intel and drive prevention efforts.

You will apply OSINT/SOCMINT approaches, map findings to MITRE ATT&CK, and contribute to automation initiatives in a hybrid Lisbon/Porto setting. Ideal candidates bring 3+ years in cyber threat intel, experience with risk protection, brand

Qualificações

• Bachelor-level degree in cybersecurity, computer engineering, networks or related field.
• At least 3 years in threat intelligence, digital risk or related roles.
• Experience with digital risk protection, brand and fraud monitoring.
• Proficient OSINT/SOCMINT techniques and dark web monitoring.
• familiarity with TI platforms such as Recorded Future, Sixgill or Flare.
• Experience with TIPs like OpenCTI, MISP or ThreatQ.
• Understanding of threat actors, malware, ransomware and attack vectors.
• Knowledge of threat intel frameworks and methodologies.
• Strong analytical, research, and report-writing skills; clear communication.

Responsabilidades

• Support digital risk protection activities including monitoring leaks and external surfaces.
• Monitor, identify, and analyze emerging threats, actors, campaigns and TTPs.
• Produce tactical, operational and strategic threat intelligence reports.
• Collaborate with SOC, IR and other cybersecurity teams.
• Enrich threat intel platforms and knowledge bases and aid automation initiatives.
• Contribute to customer and executive-level threat intelligence briefings.

Conhecimentos

Threat Intelligence

OSINT/SOCMINT

Threat Platforms

Python Scripting

SIE M awareness

Formação académica

Higher ed in Cybersecurity / Computer Eng / Networks

Ferramentas

Recorded Future

Sixgill

Flare

OpenCTI

MISP

ThreatQ

Descrição da oferta de emprego

## Threat Intelligence AnalystApply: Hybrid: Leca do Balio: Full time: Posted Today: R0341231Location: Leca do Balio, Portugal**Key Responsibilities*** Support Digital Risk Protection (DRPS) activities, including monitoring leaks, external attack surfaces, fraud threats and digital risks.* Monitor, identify, and analyze emerging cyber threats, threat actors, campaigns, and attack techniques.* Produce tactical, operational, and strategic threat intelligence reports.* Conduct research on cybercriminal groups, ransomware operations, vulnerabilities, exploits, and threat trends.* Contribute to threat intelligence briefings, customer reports, executive and operational-level reports.* Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and map findings to frameworks such as MITRE ATT&CK.* Enrich threat intelligence platforms and knowledge bases.* Collaborate with SOC, Incident Response, and other internal and external cybersecurity teams.* Participate in the continuous improvement of intelligence processes, methodologies, and automation initiatives.**Required Qualifications*** Higher education degree or technical-professional qualification in Cybersecurity, Computer Engineering, Networks, or a related field.* Minimum of 3 years of experience in related roles.* Experience with Digital Risk Protection, brand monitoring and Fraud monitoring.* Experience with OSINT and SOCMINT techniques, dark web monitoring and intelligence gathering.* Knowledge on Cyber Threat Intelligence and Threat Exposure Management platforms such as Recorded Future, Sixgill, Flare, or similar.* Experience with Threat Intelligence Platforms (TIPs) such as OpenCTI, MISP, ThreatQ, or similar.* Understanding of cyber threat actors, malware, ransomware, phishing, and common attack vectors.* Familiarity with threat intelligence frameworks and methodologies.* Relevant certifications or training (e.g. CTIA, GCTI, CPTIA) will be considered an asset.* Strong analytical, research, and report-writing skills and ability to communicate technical findings to both technical and non-technical audiences.* Team-oriented mindset, organizational skills, sense of responsibility, and ability to work effectively in dynamic and collaborative environments.* Basic knowledge of malware analysis and network traffic analysis and familiarity with SIEM solutions and other security monitoring tools.* Basic scripting and programing skills will be appreciated (Python, PowerShell, Bash).* Good written communication skills and ability to understand technical English;* Native Portuguese speaker and professional proficiency in English (C1). **Location:** Lisbon or Porto (hybrid working model)