Эта вакансия пока только на английском.

← Назад к вакансиям
A

Threat Intelligence Engineer

AB InBev·Tel Aviv, Израиль·en
Не указаноПолная занятостьThreat IntelligenceBrewing

Collect, analyze, and share actionable threat intelligence to support proactive defense and strengthen detection across the organization.

Обязанности

  • Collect, analyze, and correlate intelligence from open-source, commercial, and internal sources
  • Assess emerging threats, vulnerabilities, malware campaigns, and attack techniques
  • Investigate indicators of compromise, threat actor behavior, tactics, techniques, and procedures
  • Prepare threat intelligence reports, briefings, and summaries for technical and non-technical stakeholders
  • Share intelligence with security operations, incident response, and threat hunting teams to support detection and response
  • Help develop detection rules and signatures, including YARA and Snort, based on intelligence findings
  • Use threat intelligence platforms to ingest, store, and correlate data
  • Advise on threat trends to inform security architecture and defensive posture
  • Contribute to intelligence-driven mitigation strategies, playbooks, and procedures

Требования

  • At least 3 years of experience as an analyst or researcher at a threat intelligence company or vendor
  • At least 3 years of practical experience with threat analysis models such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain
  • Experience with threat intelligence platforms such as MISP
  • Experience analyzing indicators of compromise, tactics, techniques, procedures, and threat actor profiles
  • Knowledge of YARA rules and detection signatures
  • Knowledge of current and emerging cyber threats, including APTs, malware, ransomware, and insider threats
  • Understanding of attack vectors such as phishing, exploitation, social engineering, and web application vulnerabilities
  • Strong analytical skills and the ability to communicate complex technical information to technical and non-technical audiences

Будет плюсом

  • GIAC Cyber Threat Intelligence (GCTI), Certified Threat Intelligence Analyst (CTIA), or similar certification
  • Familiarity with scripting languages such as Python, Ruby, JavaScript, or C

Соответствие

Больше возможностей

Похожие вакансии

Новые вакансии в категории «Threat Intelligence».

Создайте профиль, чтобы увидеть оценку соответствия.

Создайте профиль, чтобы увидеть оценку соответствия.

Создайте профиль, чтобы увидеть оценку соответствия.

Создайте профиль, чтобы увидеть оценку соответствия.