Principal Threat Intelligence Analyst - CTJ - Top Secret
Core
Discovering and analyzing attacker activity across on-premises and cloud environments to enable proactive defense and customer notification before incidents occur.
Role type
Principal Threat Intelligence Analyst
Builds
Proof-of-concept and prototype threat hunting tools, automations, and new capabilities.
Domain
Cybersecurity / Threat Intelligence
Deliverable
production ML models
Required skills
Threat analysis, Malware analysis, Reverse engineering, SQL/KQL query workflows, Endpoint forensics, Cloud forensics, SIEM log analysis, Vulnerability research, Anomaly detection, Scripting for automation, Strategic/Operational/Tactical intelligence writing, Collection requirements development, Source reliability assessment.
Preferred skills
Detection engineering, Large-scale computing experience.
Technologies
SQL, Kusto Query Language (KQL), Splunk, Humio, Kibana, SIEM tools.
Responsibilities
Analyze attacker activity in on-premises and cloud environments, Build threat hunting tools and automations, Convey threat intelligence learnings to engineering teams, Distill adversary signal from large-scale suspicious activity, Develop detections for attacker methods, Produce strategic, operational, and tactical threat intelligence reports.
Seniority
Principal, hands-on IC with strategic oversight
