A
Threat Intelligence Engineer
לא צויןמשרה מלאהThreat IntelligenceBrewing
Collect, analyze, and share actionable threat intelligence to support proactive defense and strengthen detection across the organization.
תחומי אחריות
- Collect, analyze, and correlate intelligence from open-source, commercial, and internal sources
- Assess emerging threats, vulnerabilities, malware campaigns, and attack techniques
- Investigate indicators of compromise, threat actor behavior, tactics, techniques, and procedures
- Prepare threat intelligence reports, briefings, and summaries for technical and non-technical stakeholders
- Share intelligence with security operations, incident response, and threat hunting teams to support detection and response
- Help develop detection rules and signatures, including YARA and Snort, based on intelligence findings
- Use threat intelligence platforms to ingest, store, and correlate data
- Advise on threat trends to inform security architecture and defensive posture
- Contribute to intelligence-driven mitigation strategies, playbooks, and procedures
דרישות
- At least 3 years of experience as an analyst or researcher at a threat intelligence company or vendor
- At least 3 years of practical experience with threat analysis models such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain
- Experience with threat intelligence platforms such as MISP
- Experience analyzing indicators of compromise, tactics, techniques, procedures, and threat actor profiles
- Knowledge of YARA rules and detection signatures
- Knowledge of current and emerging cyber threats, including APTs, malware, ransomware, and insider threats
- Understanding of attack vectors such as phishing, exploitation, social engineering, and web application vulnerabilities
- Strong analytical skills and the ability to communicate complex technical information to technical and non-technical audiences
יתרון
- GIAC Cyber Threat Intelligence (GCTI), Certified Threat Intelligence Analyst (CTIA), or similar certification
- Familiarity with scripting languages such as Python, Ruby, JavaScript, or C