YOUR ROLE
We are looking for a Cyber Threat Intelligence (CTI) Analyst profile to watch and understand the threats
that can affect our industry and organization, anticipate future threats, and create threat intelligence-driven products.
The Cyber Threat Intelligence Analyst reports to the CTI Lead.
WHAT ARE YOU GOING TO DO
As Cyber Threat Intelligence Analyst within the Cyber Defense Center, you will:
Develop global watch intelligence:
- Watch cybersecurity blogs, research and leaks;
- Monitor the clear, the deep and the dark web for data and threats;
- Interpret political and economical news and events with a cyber point of view;
Watch the global cyber threat landscape:
- Compile attacker Tactics, Techniques and Procedures (TTPs);
- Support Digital Forensic and Incident Response (DFIR), fraud and legal investigations;
- Improve monitoring and alerting;
- Enable threat hunting based on past events;
Understand threat actors and anticipate future threats:
- Follow and watch threat actor's activities and operations;
- Extrapolate threat actor's objectives, methodologies and targets;
- Enable pro-active threat assessments;
Create threat intelligence-driven products:
- Contextualized security and threat landscape briefings for our organization and partner
- ISACs;
- Analysis of threats and attacks to a business function & assets;
- Recommendations on how to position our cyber defenses based on expected attacks;
- Compile and contextualize of Indicators of Compromise (IoCs);
Other responsibilities:
- Contribute to on-call rotation and be available for punctual off-hours emergency work;
- Participate to information sharing and collaboration (ISAC) efforts;
- Participate to CERT/SOC transversal collaboration activities;
- Participate to projects, improvements and compliance efforts related to CERT matters;
- Participate to monthly metrics;
WHAT ARE WE LOOKING FOR
- Bachelor's degree in Information Technology or related fields.
- 5 or more years of experience in a role with similar responsibilities, including CERT or SOC.
- Excellent understanding of Cyber threat intelligence frameworks, lifecycle, diamond model, kill chain, Mitre Att&ck.
- Good understanding of information security frameworks (e.g. : ISO 27000, NIST framework).
- Hold relevant cybersecurity industry credentials, including Technical SANS/GIAC certifications, Technical EC Council certifications, CISSP, and/or CISA.
- Able to convey an information security message to an organization's management and technical staff.
- Experience in the transport/shipping/logistics is a plus.
WHAT DO WE HAVE TO OFFER
- HMO w/ 2 free dependents from day 1 of hiring
- Group Life Insurance
- Medical Reimbursement (includes eyeglasses)
- Service Incentive Leave + Sick Leave + Vacation Leave + Bereavement Leave
- Birthday token
- Annual Performance Reviews w/ a chance of a salary alignment
- Annual Company Performance Bonus
- Retirement Fund
ABOUT TOMORROW
We value your professional and personal growth. That's why we share plenty of career opportunities for you to thrive within CEVA. Join CEVA for a challenging career.
