Analista de Ciberinteligencia
Core
Cyber Threat Intelligence (CTI) analyst supporting the defensive SOC by managing IOCs, conducting threat hunting, and performing Purple Team exercises to improve detection capabilities.
Role type
Mid-level defensive security analyst (CTI)
Builds
Threat intelligence feeds, detection rules, and security posture improvements for client operations
Domain
Cybersecurity / Threat Intelligence
Required skills
IOC management, MITRE ATT&CK framework, Threat Hunting, OSINT, SIEM rule engineering, technical reporting, network/systems basics
Preferred skills
SOC experience, CTI platforms, scripting (Python/Bash/PowerShell), Sigma/YARA rules, adversary emulation, CTF participation
Technologies
Elastic/OpenSearch, SIEM, MITRE ATT&CK, OSINT tools
Responsibilities
Identify and validate IOCs for injection into SIEM; Participate in Purple Team simulations aligned with MITRE ATT&CK; Create and tune detection rules on Elastic/OpenSearch; Conduct proactive Threat Hunting on logs and telemetry; Analyze threat campaigns and vulnerabilities; Perform OSINT collection and enrichment; Write technical intelligence reports
Seniority
Mid-level, hands-on IC