Threat Intelligence Analyst – Cyber Threat Research (Hybrid)

Thales; Matosinhos; Ibrido; EUR 36.000 - 60.000; Tempo pieno

Descrizione del lavoro

Thales in Lisbon or Porto is seeking a Threat Intelligence Analyst to monitor cyber threats, perform OSINT/SOCMINT research, and produce actionable intelligence across tactical, operational, and strategic levels.

The role requires 3+ years in related roles, experience with DRPS, and proficiency with TIPs like OpenCTI/MISP and platforms like Recorded Future/Sixgill/Flare. Collaboration with SOC and IR teams is essential.

Competenze

• Higher education degree or technical-professional qualification in Cybersecurity, Computer Engineering, Networks, or a related field.
• Minimum of 3 years of experience in related roles.
• Experience with Digital Risk Protection, brand monitoring and Fraud monitoring.
• Experience with OSINT and SOCMINT techniques, dark web monitoring and intelligence gathering.
• Knowledge on Cyber Threat Intelligence and Threat Exposure Management platforms such as Recorded Future, Sixgill, Flare, or similar.
• Experience with Threat Intelligence Platforms (TIPs) such as OpenCTI, MISP, ThreatQ, or similar.
• Understanding of cyber threat actors, malware, ransomware, phishing, and common attack vectors.
• Familiarity with threat intelligence frameworks and methodologies.
• Strong analytical, research, and report-writing skills and ability to communicate technical findings to both technical and non-technical audiences.

Mansioni

• Support Digital Risk Protection (DRPS) activities, including monitoring leaks, external attack surfaces, fraud threats and digital risks.
• Monitor, identify, and analyze emerging cyber threats, threat actors, campaigns, and attack techniques.
• Produce tactical, operational, and strategic threat intelligence reports.
• Conduct research on cybercriminal groups, ransomware operations, vulnerabilities, exploits, and threat trends.
• Contribute to threat intelligence briefings, customer reports, executive and operational-level reports.
• Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and map findings to frameworks such as MITRE ATT&CK.
• Enrich threat intelligence platforms and knowledge bases.
• Collaborate with SOC, Incident Response, and other internal and external cybersecurity teams.
• Participate in the continuous improvement of intelligence processes, methodologies, and automation initiatives.

Conoscenze

Threat Intelligence

OSINT

SOCMINT

Threat Modeling

Python Scripting

Report Writing

Analytical Thinking

Formazione

Bachelor's degree in Cybersecurity/Computer Engineering

Strumenti

OpenCTI

MISP

ThreatQ

Recorded Future

Sixgill

Flare

Descrizione del lavoro

Thales in Lisbon or Porto is seeking a Threat Intelligence Analyst to monitor cyber threats, perform OSINT/SOCMINT research, and produce actionable intelligence across tactical, operational, and strategic levels.

The role requires 3+ years in related roles, experience with DRPS, and proficiency with TIPs like OpenCTI/MISP and platforms like Recorded Future/Sixgill/Flare. Collaboration with SOC and IR teams is essential.