Threat Intelligence Investigator: Advanced APT & IOC

Ll Oefentherapie; Nashville (TN); On-site; USD 104,000 - 235,000; Full time

Job summary

The Oracle Threat Intelligence Center (OTIC) tracks threat actors ranging from cybercrime to advanced persistent threats (APTs) impacting Oracle and its customers. The team handles attack analysis, IOC/TP tracking, incident response support, executive communication, and technical writing.

As a Threat Intelligence Investigator, you will lead investigations, manage large datasets, and develop new tracking methods.

Qualifications

• Bachelor or Master of Science degree in Computer Science, Computer Engineering, Information Systems, Cybersecurity, or equivalent practical experience.
• 6-10+ years of industry experience in analytical and operational threat intelligence.
• Experience tracking distinct APT groups and providing intelligence on methodologies.

Responsibilities

• Lead investigations through in-depth analysis and collection efforts of suspected adversary campaigns to deliver timely, actionable intelligence.
• Provide detailed attribution analysis to identify threat actors and inform proactive defense strategies.
• Manage cross-company and executive communications, explaining intricate technical matters to non-technical audiences.
• Facilitate post-incident reviews to extract lessons learned and drive resolution actions with impacted teams.
• Collaborate with partner Cloud security teams and threat intelligence platforms to enrich data and streamline workflows.

Skills

Threat intelligence analysis

OSINT research

Incident response

Threat actor tracking

Analytical thinking

Education

Bachelor or Master of Science in CS/CE/IS/Cybersecurity

Tools

YARA

Snort

Suricata

Bro/Zeek

Job description

The Oracle Threat Intelligence Center (OTIC) tracks threat actors ranging from cybercrime to advanced persistent threats (APTs) impacting Oracle and its customers. The team handles attack analysis, IOC/TP tracking, incident response support, executive communication, and technical writing.

As a Threat Intelligence Investigator, you will lead investigations, manage large datasets, and develop new tracking methods.