Job Description :

Role & Responsibilities :

- 5+ years of experience in Cyber Threat Intelligence, Threat Research, Incident Response, Security Operations, or related cybersecurity disciplines.

- Demonstrated experience tracking threat actors, malware campaigns, adversary infrastructure, and emerging cyber threats.

- Strong understanding of threat intelligence tradecraft, intelligence lifecycle methodologies, and frameworks such as MITRE ATT&CK.

- Experience producing tactical, operational, and strategic intelligence products for technical and executive audiences.

- Familiarity with nation-state, sophisticated cyber-criminal groups and supply chain threats.

- Experience in intelligence-driven hunting to spot suspicious activities in the network and identify potential risks.

- Strong understanding of cyber threat intelligence frameworks and methodologies including MITRE ATT&CK, ATT&CK Navigator, Diamond Model, Cyber Kill Chain, STIX/TAXII, Intelligence Lifecycle, and Structured Analytic Techniques.

- Proven ability to independently conduct investigations, develop actionable intelligence, and brief stakeholders.

- Strong analytical, communication, and technical writing skills.

Desired Skills :

- Experience with Threat Intelligence Platforms such as Anomali, ThreatQ, ThreatConnect, OpenCTI, MISP, or similar platforms.

- Proficiency with intelligence and OSINT tools such as Maltego, VirusTotal, Shodan, Censys, DomainTools, PassiveTotal, GreyNoise, URLScan, SecurityTrails, or similar investigative platforms.

- Knowledge of threat actor clustering methodologies used to track adversary campaigns, intrusion sets, and threat group activity.

- Experience conducting infrastructure analysis involving domains, DNS, passive DNS, IP addresses, ASNs, WHOIS records, certificates, hosting providers, and internet-facing assets.

- Familiarity with STIX/TAXII, YARA, Sigma, Snort, Suricata, malware analysis concepts, and intelligence automation techniques.

- Experience with Python, data mining, Elasticsearch, ELK Stack, Databricks, large-scale data analysis, and threat intelligence correlation workflows.

- Industry certifications such as GCTI, CTIA, GCIH, GCFA, CISSP, or equivalent cybersecurity and threat intelligence certifications.