Principal Threat Intelligence Analyst

Huntress

5h•Remote

About The Position

The Huntress Adversary Tactics team is looking for a Principal Threat Intelligence Analyst to research, hunt, and uncover threats in customer networks. Competitive candidates will have experience building a threat intelligence program using internal and external threat data, creating Threat Intelligence reports, advocating for product enhancements, and public speaking. Threat Intelligence Analysts aggregate threat data, build reports for customers, and create marketing materials regarding emerging threat trends. They also collaborate with Security and Product Researchers to gain context on threat data. Familiarity with product management, scripting/development, incident response, malware analysis, configuration management, and antivirus technologies is a plus. The role requires fostering collaboration between Product, Marketing, and Security teams to accelerate the company's mission and deliver impactful features and capabilities.

Requirements

Experience with SIEM tools for scaled log analysis
Familiarity with detection engineering, detection logic, i.e., Sigma Rules
Experience researching and scoping threat hunt missions
Understanding of cybersecurity, threat actors, and end-to-end threat life cycle, including one or more of the following: digital forensics, malware research, incident response, vulnerabilities, and exploits
Experience with 3rd-party intelligence tools, feeds, and reputation services
Experience conducting OSINT gathering and analysis
Excellent written and verbal communication skills
Familiarity with utilizing AI in workflows

Nice To Haves

Foundational development experience across multiple platforms (e.g., Windows and/or macOS), C/C++, GoLang, and Python
Proficient knowledge of Windows and/or macOS subsystems and how they interact both at the user and kernel level

Responsibilities

Conducts research on emerging adversary tradecraft to help make decisions on operationalizing our data
Responsible for aggregating threat data to build out reports for customers to show Huntress’ value, and inform them of various threats that have been seen and reported
Responsible for creating reports for marketing to show Huntress’ value to the larger community
Promote Huntress’ reputation through media interaction, public speaking, and blogs
Works with the Sr. Director of Adversary Tactics, the Security Operations Center, Product, and others to develop the Product and threat operations roadmap
Provides technical leadership for some members of the Security team
Supports the professional development of researchers in the organization through coaching and mentorship
Responsible for enhancing Huntress visibility by ingesting and utilizing IOCs from external threat intel sources
Responsible for blog posts and other marketing materials regarding threat trends
Responsible for building a threat intelligence program that makes use of our internal threat data