Cyber Threat Intelligence Analyst_ 5+ years

Atyeti Inc.; United States; Teletrabalho; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

Atyeti Inc. is seeking a Senior Cyber Threat Intelligence Analyst in the United States to monitor threats, analyze adversary activity, and produce actionable intelligence for technical and executive audiences.

You will lead IOC collection, manage records in the TIP, and disseminate threat advisories to internal teams and trusted partners. You will collaborate with Security Operations and Risk teams, performing adversary-focused analysis during incidents and helping shape defensive strategies

Qualificações

• 5+ years in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Strong understanding of threat intelligence tradecraft and MITRE ATT&CK frameworks.
• Experience producing intelligence products for technical and executive audiences.
• Familiarity with nation-state, sophisticated cyber-criminal groups, and supply chain threats.
• Knowledge of intelligence-driven hunting to spot suspicious network activity and risks.
• Understanding of STIX/TAXII, YARA, Sigma, Snort, Suricata, and intelligent automation concepts.
• Experience with Python, data mining, ELK, and threat intelligence correlation workflows.

Responsabilidades

• Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability trends.
• Track threat actors and analyze their capabilities, targeting, infrastructure, and TTPs.
• Conduct investigations using threat intel, OSINT, and infrastructure analysis techniques.
• Correlate intelligence from multiple sources and assess impact to the organization.
• Lead IOC collection, enrichment, validation, and lifecycle management.
• Maintain intelligence records and artifacts within the TIP.
• Develop and disseminate actionable threat advisories, reports, and alerts.
• Support intelligence-sharing with internal stakeholders and external partners.
• Produce tactical, operational, and strategic intelligence for technical and business audiences.
• Deliver intelligence briefings to security teams and leadership.
• Provide threat-informed recommendations to improve awareness and preparedness.
• Serve as SME on adversary activity, threats, and cyber risk trends.
• Provide intelligence support during investigations and incident response activities.
• Partner with Security Operations, Vulnerability Management, and Risk teams for context.

Conhecimentos

Threat Intelligence

Incident Response

Security Operations

MITRE ATT&CK

Threat Hunting

Intelligence Lifecycle

Structured Analytic Techniques

OSINT Tools

Ferramentas

Anomali Threat Platform

ThreatQ

ThreatConnect

OpenCTI

MISP

Maltego

VirusTotal

Shodan

Censys

DomainTools

PassiveTotal

GreyNoise

URLScan

SecurityTrails

STIX/TAXII

Python

Elasticsearch/ELK

Databricks

Descrição da oferta de emprego

Role & responsibilities

Senior Cyber Threat Intelligence Analyst

Key Responsibilities

Threat Monitoring & Intelligence Analysis

• Monitor and assess emerging cyber threats, adversary activity, malware campaigns, and vulnerability exploitation trends.
• Track threat actors and provide analysis on their capabilities, targeting, infrastructure, and TTPs.
• Conduct technical investigations using threat intelligence, OSINT, and infrastructure analysis techniques.
• Correlate intelligence from multiple sources and assess potential impact to the organization.

Intelligence Operations & Dissemination

• Lead IOC collection, enrichment, validation, and lifecycle management activities.
• Maintain intelligence records, indicators, and threat artifacts within the organization's Threat Intelligence Platform (TIP).
• Develop and disseminate actionable threat advisories, intelligence reports, and emerging threat notifications.
• Support intelligence-sharing efforts with internal stakeholders and trusted external partners.

Intelligence Reporting & Stakeholder Engagement

• Produce tactical, operational, and strategic intelligence products for technical and business audiences.
• Deliver intelligence briefings to security teams, leadership, and other stakeholders.
• Provide threat-informed recommendations that improve organizational awareness and preparedness.
• Serve as a subject matter expert on adversary activity, emerging threats, and cyber risk trends.

Incident Response & Security Support

• Provide intelligence support during cybersecurity investigations and incident response activities.
• Perform adversary-focused analysis to support incident scoping, attribution, and impact assessments.
• Partner with Security Operations, Vulnerability Management, and Risk teams to provide threat context and intelligence insights.
• Identify intelligence gaps, emerging risks, and opportunities to strengthen defensive capabilities.

Required Qualifications

• 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.
• Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.
• Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.
• Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.
• Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats
• Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
• Strong understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.
• Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.
• Strong analytical, communication, and technical writing skills.

Desired Skills

• Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.
• Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.
• Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.
• Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.
• Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.
• Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.
• Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.