Cyber Security Threat Intelligence Analyst II

The Intersect Group; Phoenix (AZ); On-site; USD 90,000 - 120,000; Full time

Job summary

The Intersect Group seeks a Cyber Security Threat Intelligence Analyst II to monitor and analyze threats facing company networks and transform findings into actionable guidance for improving security posture. You will work with SOC tools, analyze alerts, and track campaigns to anticipate adversary activity.

You will contribute to threat intelligence coordination, document intelligence briefs, and participate in on-call rotations while supporting the team’s mission to protect data confidentiality

Qualifications

• Bachelor’s degree or 2-year technical degree in Computer Science, Engineering, Math or Physical Science.
• 4+ years of information security technology experience.
• Analytical skills across multiple technologies.
• Intermediate networking and security concepts.
• Experience with MITRE ATT&CK or similar threat modeling frameworks.
• Experience with incident response processes.
• Experience tracking campaigns and responding to threats.
• Strong teamwork and communication abilities.

Responsibilities

• Monitor and analyze threats using multiple cyber defense tools.
• Maintain awareness of current threat landscape and adversary techniques.
• Manage Threat Intelligence tools and tune alerting for IOC matching.
• Analyze malware and large datasets to identify trends and provide security posture recommendations.
• Perform intrusion detection analysis on networks, systems, and applications.
• Develop documentation such as procedures and intelligence briefs on threat trends.
• Represent the Security Operations team at threat intelligence forums.
• Participate in on-call rotations as required.
• Protect the confidentiality and integrity of systems and data.

Skills

Threat analysis

MITRE ATT&CK

Incident response

Data analysis

Team collaboration

Effective communication

Security awareness

Education

Bachelor's degree in Computer Science or related field

2-year degree in a technical discipline

Tools

SOAR tools

IDS/IPS

SIEM

Job description

The Cyber Security Threat Intelligence Analyst II is part of a high-performance team, responsible for monitoring and analyzing internal and external threats facing the company networks and correlating those threats into actionable items for the organization. The core responsibility of this position is to better position the company against threats that are both unknown and known.

Essential Functions

• Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of analyzing threats.
• Maintains awareness of current threat landscape, including adversary tactics, techniques, and procedures.
• Manages Threat Intelligence tools and configures and tunes alerting on known IOC matching
• Analyzes malware and large data sets to isolate trends and patterns; responds to alerts and provides recommendations to improve company’s security posture. Escalates complex issues as needed.
• Performs network/system/application/log intrusion detection analysis to complement threat research
• Performs moderately complex analysis of potentially malicious activities and software
• Maintains awareness of trends in security, regulatory, technology, and operational requirements
• Creates documentation such as procedures and intelligence briefs and analysis on current threat trends and landscapes relevant to Early Warning Systems
• Represents the Security Operations team at internal and external threat intelligence and cybersecurity forums
• Performs on-call activities when required
• Ensures the company\'s commitment to protect the integrity and confidentiality of systems and data.

Minimum Qualifications

• Education and/or experience typically obtained through completion of a Bachelor’s degree or 2 year degree in Computer Science, Engineering, Math or Physical Science.
• Minimum 4 years of information security technology experience
• Proven analytical skills across various technologies
• Intermediate understanding of Networking and security concepts
• Intermediate understanding of Windows, Linux/Unix and Mac Operating Systems
• Intermediate understanding of Adversarial Tactics, Techniques and Common Knowledge framework (MITRE) and other threat modeling frameworks
• Working knowledge of Tool, Tactics and Procedures (TTPs) used by APT groups
• Experience with the incident response process
• Experience in tracking campaigns
• Experience in responding to malicious threats coming from various sources
• Ability to work within a team environment as well as independently
• Effective communication skills to speak and write for all technology experience levels.
• Effective interpersonal skills, able to comfortably present to peers, coworkers, and customers
• A propensity for continued development of skills though research and training
• Background and drug screen.

Preferred Qualifications

• Additional related education, certifications and/or experience is beneficial
• Working experience in cloud technology security
• Experience utilizing Security Orchestration Automation Response (SOAR) tools