Cyber Threat Intelligence Analyst

UBS • Weehawken, NJ

278d

About The Position

Are you interested in helping an innovative cybersecurity function to defend a large firm from cyber threats? Are you looking to your cybersecurity and threat analysis expertise? We're looking for a Cyber Threat Intelligence Analyst to proactively monitor and analyze the cyber threat landscape to assess risk and applicability to our firm. You will research, model, analyze, and prioritize emerging adversarial tactics, techniques, and procedures (TTPs) and their likelihood and impact to our firm. You will consume and evaluate threat intel to understand the evolving threat landscape, adversarial tactics, techniques, and procedures (TTPs), and areas of concern/targeting that could potentially impact our environment. Additionally, you will create threat intelligence reports with thorough and accurate analysis leveraging a variety of open-sources and commercial tools and engage with other functions to provide specialized knowledge and requirements to influence threat mitigation strategies. You will manage and consolidate cyber threat knowledge based on industry-level frameworks and provide curated adversarial cyber intel and threat briefings. Furthermore, you will support investigations related to phishing, malware, and DDoS campaigns and engage external communities to contribute to threat intelligence exchange activities.

Requirements

• 5+ years of combined experience in cyber threat intelligence, threat research-oriented, or cyber investigations role.
• Good understanding of cybersecurity organization practices, operations risk management processes, and principles.
• Detailed knowledge and technical understanding of the global cyber threat landscape.
• Knowledge of threat modeling frameworks, such as cyber kill chains or the MITRE ATT&CK™ framework.
• Experience conducting investigations and analysis of phishing & malware campaigns.
• Familiarity with open-source and commercial tools for continuous monitoring of the threat landscape.

Nice To Haves

• Experience with scripting and programming languages.
• Certifications such as GSEC, GCTI, GREM, CISSP, or OSCP.

Responsibilities

• Proactively monitor and analyze the cyber threat landscape to assess risk and applicability to the firm.
• Research, model, analyze, and prioritize emerging adversarial tactics, techniques, and procedures (TTPs).
• Consume and evaluate threat intel to understand the evolving threat landscape.
• Create threat intelligence reports with thorough and accurate analysis.
• Manage and consolidate cyber threat knowledge based on industry-level frameworks.
• Support investigations related to phishing, malware, and DDoS campaigns.

Benefits

• Flexible working arrangements like part-time, job-sharing, and hybrid working.
• Opportunities for career returners.
• Commitment to diversity, equity, and inclusion.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Securities, Commodity Contracts, and Other Financial Investments and Related Activities