Cyber Technical Intelligence Analyst
Core
Analyze tactical and technical intelligence to support threat hunting, detection engineering, and incident response for the NYC Department of Buildings' IT environment.
Role type
Cyber Technical Intelligence Analyst (Threat Management)
Builds
Threat intelligence reports, detection rules, and risk mitigation strategies for municipal IT infrastructure.
Domain
Cybersecurity / Threat Intelligence / Municipal Government
Required skills
Threat hunting, malware analysis, network traffic analysis, predictive analytics, incident response support, log-based threat detection, endpoint-based threat detection, cross-asset correlation, scripting (PowerShell, Python), automation (Power Automate, Microsoft Graph API), MDM architecture, policy design (ThreatLocker), ACL management.
Preferred skills
None explicitly stated.
Technologies
ThreatLocker, PowerShell, Python, Power Automate, Microsoft Graph API, intrusion detection/prevention systems, firewalls, host-based security systems.
Responsibilities
Consume and analyze tactical/technical intel; assist hunt missions; collect and disseminate IOC's and finished reports; develop threat communication processes; perform network/system/kill chain analysis; conduct research on code families/campaigns; employ predictive analytics; characterize network traffic/server metrics; resolve SOC remediation requests; provide analytic support to SOC/IR/Risk Analysts; investigate suspicious traffic; conduct network monitoring and intrusion detection; correlate activity across assets/environments; support business continuity/disaster recovery plans; research emerging threats; provide incident response support; design/maintain ThreatLocker policies; manage application whitelisting/ringfencing; use scripting/automation tools; create custom threat briefing materials.
Seniority
Mid-level (4 years experience required), hands-on IC.
