Cyber Threat Intelligence Analyst
YOUR ROLE
We are looking for a Cyber Threat Intelligence (CTI) Analyst profile to watch and understand the threats
that can affect our industry and organization, anticipate future threats, and create threat intelligence-driven products.
The Cyber Threat Intelligence Analyst reports to the CTI Lead.
WHAT ARE YOU GOING TO DO?
As Cyber Threat Intelligence Analyst within the Cyber Defense Center, you will:
Develop global watch intelligence:
Watch cybersecurity blogs, research and leaks;
Monitor the clear, the deep and the dark web for data and threats;
Interpret political and economical news and events with a cyber point of view;
Watch the global cyber threat landscape:
Compile attacker Tactics, Techniques and Procedures (TTPs);
Support Digital Forensic and Incident Response (DFIR), fraud and legal investigations;
Improve monitoring and alerting;
Enable threat hunting based on past events;
Understand threat actors and anticipate future threats:
Follow and watch threat actor’s activities and operations;
Extrapolate threat actor’s objectives, methodologies and targets;
Enable pro-active threat assessments;
Create threat intelligence-driven products:
Contextualized security and threat landscape briefings for our organization and partner
ISACs;
Analysis of threats and attacks to a business function & assets;
Recommendations on how to position our cyber defenses based on expected attacks;
Compile and contextualize of Indicators of Compromise (IoCs);
Other responsibilities:
Contribute to on-call rotation and be available for punctual off-hours emergency work;
Participate to information sharing and collaboration (ISAC) efforts;
Participate to CERT/SOC transversal collaboration activities;
Participate to projects, improvements and compliance efforts related to CERT matters;
Participate to monthly metrics;
WHAT ARE WE LOOKING FOR?
Bachelor's degree in Information Technology or related fields.
5 or more years of experience in a role with similar responsibilities, including CERT or SOC.
Excellent understanding of Cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, Mitre Att&ck.
Good understanding of information security frameworks (e.g. : ISO 27000, NIST framework).
Hold relevant cybersecurity industry credentials, including Technical SANS/GIAC certifications, Technical EC Council certifications, CISSP, and/or CISA.
Able to convey an information security message to an organization’s management and technical staff.
Experience in the transport/shipping/logistics is a plus.
WHAT DO WE HAVE TO OFFER?
HMO w/ 2 free dependents from day 1 of hiring
Group Life Insurance
Medical Reimbursement (includes eyeglasses)
Service Incentive Leave + Sick Leave + Vacation Leave + Bereavement Leave
Birthday token
Annual Performance Reviews w/ a chance of a salary alignment
Annual Company Performance Bonus
Retirement Fund
ABOUT TOMORROW
We value your professional and personal growth. That’s why we share plenty of career opportunities for you to thrive within CEVA. Join CEVA for a challenging career.