Senior Threat Intelligence Analyst
Core
Discovering and analyzing attacker activity across on-premises and cloud environments to enable proactive defense and customer notification.
Role type
Senior Threat Intelligence Analyst (Security Research IC4)
Builds
Proof-of-concept and prototype threat hunting tools, automations, and new capabilities.
Domain
Cybersecurity, Threat Intelligence, Cloud Security
Deliverable
production ML models
Required skills
Threat analysis, Vulnerability research, Anomaly detection, Malware analysis, Reverse engineering, Detection engineering, SQL, Kusto Query Language (KQL), SIEM log analysis, Endpoint forensics, Cloud forensics, Scripting, Analytic writing, Actor tracking, Campaign clustering
Preferred skills
Reverse engineering, Detection engineering depth
Technologies
SQL, KQL, Splunk, Humio, Kibana
Responsibilities
Identifying potential threats and performing threat intelligence knowledge transfer, Building proof-of-concept and prototype threat hunting tools, Using large-scale query workflows to distill adversary signal, Conveying learnings from threat intelligence to engineering partner teams, Producing strategic, operational, and tactical threat intelligence including actor tracking and campaign clustering, Developing collection requirements and turning raw telemetry into actionable assessments
Seniority
Senior, hands-on IC
