Threat Intelligence Analyst

Vaga não está no LinkedIn

🕒 Outubro 29

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟡 Pleno

🟠 Sênior

🔐 Analista de Segurança da Informação

👻 Score fantasma 10%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 14 dias.
• As vagas desta empresa costumam ser preenchidas em 26 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

Team Cymru

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 1998

💼 Consultoria

🏥 Saúde

🔒 Cibersegurança

💰 Private equity em 2021-09

Consulting • Healthcare • Cybersecurity

A Team Cymru é uma empresa de cibersegurança que fornece inteligência de ameaças em tempo real e em escala na internet, além de visibilidade de rede para defensores de infraestrutura crítica. Eles analisam NetFlow bruto e atividade global da internet para fornecer descoberta passiva de ativos, feeds de ameaças acionáveis, análise de botnet e malware, mitigação de DDoS e suporte à resposta a incidentes (CSIRT). Seus produtos se integram com plataformas SIEM, SOAR e TIP, e são oferecidos como feeds, APIs e serviços gerenciados para equipes de operações de segurança e empresariais.

Descrição

• Conduct proactive research into threat actors, malware families, campaigns, and evolving TTPs • Investigate and present operational and strategic intelligence on threat actors, including attribution, motivation, capability, and geopolitical context • Lead short- and long-term threat tracking projects • Identify intelligence gaps and propose targeted research to address collection shortfalls • Evaluate tools, methodologies, and best practices for understanding adversary TTPs • Perform network traffic and infrastructure analysis using Team Cymru's global dataset • Analyze PCAP, NetFlow, passive DNS, open ports, certificates, and other datasets • Map malicious infrastructure and identify related threat actor assets • Identify and refine IOCs and threat actor TTPs, translating them into automated tracking mechanisms • Receive, triage, and respond to customer requests with timely technical threat intelligence reports • Produce intelligence tailored to customer threat landscapes and requirements • Ensure intelligence products meet analytic standards, including clear structure, estimative language, confidence levels, and actionable conclusions • Conduct peer review of colleagues' reporting • Collaborate on analytical tools, data analytics systems, research methodologies, and automation capabilities • Support threat detection and data acquisition teams with signature development and telemetry collection priorities • Participate in working groups, industry events, and community collaboration as a Team Cymru representative

🎯 Requisitos

• 5+ years of experience as a threat intelligence analyst, network forensics analyst, or IT security analyst • Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent is preferably required/desired • Exceptional oral and written communication skills • Ability to produce customer-facing intelligence reports under time pressure • Experience using structured analysis techniques, estimative language, and confidence levels • Proven track record of leading complex analytical projects or investigations • Ability to manage multiple concurrent work streams • Strong analytical, deductive reasoning, and critical thinking skills • Ability to work effectively within a distributed, remote team environment • Experience tracking APT, nation-state, or cybercriminal actors • Network infrastructure and traffic analysis skills: PCAP, NetFlow, PDNS, open ports, and certificates • Deep knowledge of IP networking and internet services, including DNS, HTTP/HTTPS, TLS, VPNs, and BGP • Knowledge of operating system concepts, indicators of compromise, and host- and network-level detection architectures • Working proficiency in SQL and querying/analyzing large disparate datasets • Familiarity with OSINT platforms and research techniques • Occasional local and international travel required • Highly desirable: regional or threat actor subject matter expertise, Python, public speaking, AI systems, Linux server management, malware analysis, YARA, Zeek, Suricata, sandbox reporting, malware reverse engineering, Ghidra, IDA Pro, x64dbg, and hosting provider/ISP/internet exchange operations

🏖️ Benefícios

• Collaborative, mission-driven culture • Remote position • Occasional local and international travel for customer workshops, industry events, and team meetings • Participation in exclusive industry conferences, working groups, industry events, and community collaboration • Equal opportunity employer

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo