Becoming a subject matter expert known adversaries, tracking them on a day-by-day basis, and escalating concerning developments, as necessary.
Triaging tactical reporting to focus on serious threats and/or those likely to be perceived as such
3 plus years of experience in cyber security or related discipline.
SIEM, Cortex XSIAM, correlation, and threat monitoring
Understands the following concepts: confidence intervals, MITRE, kill chain, C2, passive DNS, traffic light protocol, and collections bias.
Strong written and verbal communication skills to effectively communicate complex concepts at a high level while retaining meaning and highlighting features in a way that maximizes audience engagement.
Strong problem solving and critical thinking capabilities.
Ability to work with a high degree of independence.