Senior Intelligence Analyst

About the job

This is an exciting opportunity to join Mandiant Intelligence, delivering our Advanced Intelligence Access (AIA) service. Being onsite and embedded with a customer four - five days per week, you will leverage Mandiant's cyber threat intelligence to enable network defenders and customer CTI teams to defend against the threats they face. You will be supported and enabled by a fantastic network of colleagues and specialists right across Mandiant Intelligence and will contribute to Mandiant's wealth of deep technical skills and CTI knowledge. You will have access to industry leading tooling and data and will work towards delivering on customer priority intelligence requirements.

This role is focused on supporting the customer's CTI defensive mission. Helping their SOC, threat hunters, detection engineers, and CTI analysts counter threats and enable the safe and secure running of their networks and operations.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends.
• Track and contribute CTI analysis within Mandiant, of customer's priority threat concerns.
• Enable customer SOC analysts to deploy and leverage Mandiant's CTI.
• Generate CTI, and perform analysis of customer data, taking their bespoke sources to identify threat activity, or to build and automate analytical workflows.
• Write intelligence reporting against customer requirements, appropriate for their intelligence analysts or senior readers.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  
• 5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.
  
• Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats
  
• Experience of network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.
  

Preferred qualifications:

• Experience of conducting or supporting incident response and investigations within enterprise environments.
  
• Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.
  
• Understanding of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
  

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, a related technical field, or equivalent practical experience.
  
• 5 years of experience working in a government or military environment, leveraging and developing CTI for network, host and log analysis, to enable the detection and response to cyber threats.
  
• Experience in leveraging CTI to describe, track and develop new intelligence on Advanced Persistent Threats
  
• Experience of network IDS monitoring, EDR solutions, SIEM and SOAR integration, and managing and contributing CTI into a Threat Intelligence Platform.