Lead Threat Intelligence Analyst

Job Purpose

 At CPX, trust is at the heart of everything we do just because it is essential to every part of our connected digital world. Whether it is enjoying the freedom of a protected internet, secure transactions or safe communications - we protect, transform and nurture today so that all people can flourish with the freedom to achieve their potential tomorrow.

As a Lead Threat Intelligence Analyst, you will have strong analytical and investigative skills and be capable of receiving mass data and translate it into bright intelligence findings. You will conduct research and analysis, and will collaborate to author various analytic documents, identifying findings and presenting hypotheses and intelligence gaps and recommendations. The analyst will also review weekly, monthly and on demand reports enabling discussions relating to our mission. The analyst will also contribute to the enhancement of the Threat Intelligence Center, processes, tool selection and capabilities through continuous innovation.

Job Responsibilities

Key Focus Areas

Key Activities 

Key Responsibilities

• Collection, analysis and distribution of threat intelligence from multiple sources (All-Source Intelligence)
• Manage threat intelligence platforms and monitor feed sources for efficacy
• Preparation of intelligence products, including high-quality papers, assessments, briefings, recommendations, and findings.
• Develop, manage, optimize and continuously improve processes to enhance the overall cyber threat intelligence function
• Develops and validates templates
• Validates TIP processes and procedures – assists in authoring
• Assist in the definition of corporate intelligence requirements (both inside and outside of the team, to include key business areas or units) based on changes to business needs, structure, priorities and technology
• Dissemination of Intel products, to include threat alerts, reports, briefings, etc.
• Contribute to situational awareness activities or processes within the organization, and business, providing business context to active or emerging threats
• Conduct intelligence assessments to determine key characteristics of the attack, attribution, and actor motivation, intent, and capability.
• Enhance the Threat Intelligence Center, processes, tool selection and capabilities through continuous innovation.
• Continuous exploration of future TI developments and mentoring of junior team members

AOR (Any Other Responsibilities)

Any other responsibilities as required by the Line Manager

Job Specifications

Skills/Certifications (Technical & Non-Technical)

• Have in-depth analytical and monitoring skills, team cooperation and ability to work in a high-pressure environment.
• Demonstrate the ability to communicate effectively with the other key stakeholders.
• Have a passion for security, with a good understanding of adversary motivations, capability and intent and the tools and techniques of the trade
• Expertise in understanding and applying the intelligence lifecycle.
• In-depth awareness and use of open source intelligence-type tools and methods.
• Expertise in collection methods, intelligence production and analysis, analytic writing, argument mapping, and structured analytic techniques.
• Training in critical thinking, cyber intelligence, and cyber counterintelligence
• Strong knowledge of threat intelligence platforms.
• Strong analytic tradecraft is necessary, as is the ability to defend analysis in the face of countervailing opinion. 
• Strong understanding of the information security threat landscape
• Formal intelligence analysis training and/or intelligence application experience
• Ability to work well with others in a fast-paced dynamic environment
• Excellent verbal and written communication skills with strong interpersonal, facilitation & communication skills
• Ability to learn & perform analysis quickly while balancing attention to detail and thoroughness
• In-depth knowledge and understanding of cyber-attack vectors, detection techniques, malware analysis, cybercrime networks and methodologies
• Experience working in large scale security operations especially large corporations, military or government organizations
• Experience with using threat intelligence analytics software
• Strong understanding of threat models, including security kill chain and diamond model
• CISSP, GIAC, or similar Information Security/CTI certification is preferred

Minimum Work Experience

8+ years' experience working in a cyber threat analyst, threat researcher and/or intelligence analyst

Education

Bachelor’s degree in Computer Information Systems or a related discipline, or equivalent experience