Specialist, Cybersecurity Operations (Hybrid - Rahway, NJ)

Merck & Co.•Rahway, NJ

113d•Hybrid

About The Position

As a part of our Company's Cyber Fusion Center (CFC), the Cyber Threat Intelligence (CTI) team collaborates with external and internal stakeholders across international technical centers to maintain our Company's proactive cybersecurity posture. The CTI team enables our Cyber Fusion Center to maintain an intelligence and threat informed approach to cybersecurity. The team liaises with our Company business partners to propose ideas and innovative solutions that reduce risk and enable new organizational capabilities. The CTI Platform Specialist is responsible for supporting daily operations, including threat intelligence, threat hunting, and vulnerability research. Additionally, the CTI Platform Specialist is responsible for supporting, maintaining CTI platforms and driving innovative solutions leveraging cutting-edge technology to reduce risk to the organization.

Requirements

High School Diploma required.
Minimum of 2 years of relevant experience.
Experience with cyberthreat intelligence, vulnerability management or malicious threat hunting.

Nice To Haves

Solid technical knowledge of one or more areas cybersecurity areas such as incident response and digital forensics, security engineering, malware analysis, or security operations.
Experience working with Threat Intelligence Platform and Collaboration tools.
Experience working with extremely large data sets, using tools and scripting languages within Excel, Python, CrowdStrike Logscale, Microsoft Sentinel (KQL), and Power BI.
Experience working with LLM models and prompt engineering.
Independently delivers complex tasks applying critical thinking and care for detail.

Responsibilities

Evaluate tools, methodologies, and best practices to effectively understand the tactics, techniques, and procedures (TTPs) utilized by cyber threat actors.
Perform continuous research and collection of information based on our Company's Intelligence Requirement Framework from open source, vendor collection, and internal tooling to identify threat intel and cyber risks.
Monitor and action open source and vendor data for potential domain abuse, third party cyber incidents, credential/data leakage, dark web and social media malicious indicators, and executive impersonation.
Conduct basic threat hunting within Security Information and Event Management (SIEM) systems and within specific tools for malicious indicators and threat actor TTPs.
Research vulnerabilities and manage vulnerability response and remediation processes in our Company environment.
Support development of visualizations for external stakeholders.
Support data management and development of technical solutions.
Provide briefings to ITRMS stakeholders and ITRMS LT.
Collaborate with internal stakeholders for information sharing.
Participate frequently as team representative during internal daily calls.
Support operational incidents via cyber threat analysis, hunting, and vulnerability management.