Talent.com
Security Threat Intelligence Engineer
Security Threat Intelligence EngineerCloud Security Services • US
Security Threat Intelligence Engineer

Security Threat Intelligence Engineer

Cloud Security Services • US
[job_card.30_days_ago]
[job_preview.job_type]
  • [job_card.full_time]
  • [filters_job_card.quick_apply]
[job_card.job_description]

About the opportunity :

  • Cloud Security Services is seeking a Security Threat Intelligence Engineer Consultant to support their Threat Management Threat Intelligence team objectives to ensure cyber threats are continuously evaluated for risk and impact to client, customers, third parties, infrastructure, and wider ecosystem for all environments.
  • This is a 6-month remote opportunity.

Responsibilities :

  • Collecting, processing, and analyzing information regarding security threats provides indication and warnings of impending attacks.
  • Producing and disseminating intelligence products, advisories or tailored reports.
  • Analyze and report on unique attack vectors, emerging cyber threats, and current trends used by malicious actors.
  • Daily threat intelligence monitoring through open and closed sources.
  • Continually improve how the threat intelligence team works, including creation of run books, procedures, automation or other efficiencies.
  • Maintain, develop and continually analyze threat data / intelligence sources, both technical and non-technical.
  • Identify, evaluate and communicate new and ongoing cyber security threats through regular and ad-hoc reporting; produce intelligence briefings, attribution reports, and position papers.
  • Produce concise tactical warning bulletins and other analytic reports that detail daily findings, events, and activities.   Conduct collection and support attribution and analysis from incident response and threat hunting functions case findings.
  • Collection and analysis of All-Source intelligence, research data from multiple intelligence providers in order to analyze findings and produce quality Intelligence Products.  Support threat hunts and purple teaming endeavors to identify threat actor groups and their techniques, tools, and processes utilizing threat intelligence.
  • Analysis of anomalous log data, and results of collaborative team sessions to detect, and eradicate threat actors on the network.  Analyze and support security incidents for further enrichment of detection and alerting capabilities.
  • Continuously improve processes for use across detection sets for more efficient operations.  Generate reporting of trending metrics.
  • Acquire threat intelligence and technical indicators from external sources; develop tactical intelligence and technical indicators internally and collaborate with the incident response often.
  • Evaluate data sources for consideration in the improvement and expansion of the threat intelligence program.
  • Required Skills                                                                   Solid understanding of common and advanced threats, penetration / intrusion techniques and attack vectors such as Malware analysis APT / Crimeware ecosystems Exploit kits Cyber Hunting  Cyber Threat intelligence  Software vulnerabilities & exploitation  Data analysis  Knowledge of current hacking techniques, cyber threat actors, attribution concepts, security analysis techniques, recent cyber incidents and vulnerability disclosures.  Understanding of common threat analysis, and threat modeling techniques used in CTI such as diamond model, kill chain, F3EAD, MITRE ATT&CK framework, and the threat intelligence lifecycle.
  • Competency in using common intelligence datasets obtained from information sharing sources, malware collections, and other internet derived data.

    • Familiarity with the following tools :

  • Threat Intelligence Platform (TIP)  Threat intelligence feeds  STIX, MISP and TAXII frameworks  Open Source Intelligence feeds and tools (OSINT)  Malware Analysis / Reversal Tools  Security Incident and Event Monitoring (SIEM)  Security Orchestration, Automation & Response (SOAR)  Network sniffers and packet tracing tools.  Threat Intelligence Platforms (TIP)  Security Information& Event Management (SIEM)  Intrusion Detection& Prevention (IDS / IPS)  End Point Detect& Response (EDR) Email and Web filtering technologies  link-analysis methods and software (e.g., Maltego, Analyst Notebook)  Familiarity with :     Cloud platforms - AWS, Azure, GCP etc.   Meraki dashboard and products   Ability to write custom query logic for major Security Incident and Event Monitoring (SIEM) tools.
  • Ability to write SQL to search data warehouse databases.
  • A minimum of 10 years of information security experience with at least 7 years of experience with all-source cyber intelligence and analysis; or the equivalent combination of higher education and / or real-world experience.   Have experience working on threat intelligence teams with specific experience in cyber threat intelligence, cybersecurity operations, security monitoring, malware analysis, threat hunting, and / or adversary emulation.
  • Strong analytical reasoning skills with the ability to recognize and evaluate facts, objectively analyze events, blend and organize threat data from multiple sources.
  • Experience conducting intelligence research using existing tools, analyze data, making connections for purposes of creating intelligence products.  Possess organizational multitasking and commitment to follow-up.
  • Ability to develop specific expertise, discern patterns of complex threat actor behavior, and communicate an understanding of current and developing cyber threats.   Ability to communicate intelligence and analysis of cyber threats in various forms (written production; briefings) to varying audiences.  Understand common threat actor tactics, techniques, and procedures (TTPs) and how they are chained together.
  • Experience in working with a geographically diverse team in multiple time zones around the globe.  Broad experience managing complex projects, particularly projects requiring support and partnership outside your immediate team.   Ability to create and / or re-architect new and existing solutions in a scalable manner.  Are able to work independently and identify areas of need in highly ambiguous and time-sensitive situations.
  • Demonstrated familiarity and expertise with data analytics tools like Splunk, ELK, Snowflake or other searchable big data solutions.  Excellent analytical skills.
  • Collaborative team worker – both in person and virtually using WebEx or similar.  Excellent documentation skills; demonstrated proficiency in Microsoft Office including Word, Excel and PowerPoint.  Ability to work as liaison between business and information security / information technology.  Flexibility to accommodate working across different time zones.  Ability to work PST (Pacific Time Zone).  Excellent interpersonal communication skills with strong spoken and written English.  Business outcomes mindset.
  • Solid balance of strategic thinking with detailed orientation.
  • Self-starter, ability to take initiative.
  • Project management and organizational skills with attention to detail.

    • Preferred Skills                                             Relevant industry security certifications such as CISSP, SANS GIAC (e.g. GCTI, GCIH, GNFA, GCFE, GCFA, GREM), AWS certifications (SAA, SAP, or SCS), etc.    Experience developing and presenting cybersecurity topics in written products and presentations, including conference presentations, webinars, and blog posts.  Familiarity with other security verticals such as :

  • Digital Forensics, Incident Response, Threat Detection, Application Security, Cloud Security, Offensive Security.
  • Networking experience with LAN / WAN routing and high availability (OSPF, BGP4 / iBGP, EIGRP, and NSRP) routing protocols and technologies.
  • Considerable working knowledge in one or more of the following topics APT, Cybercriminals, financially motivated cyber groups, Hacktivism, DDoS attack methods, malware variants, Mobile and Emerging Threats, Social Engineering, Insider Threats.  Broad network and technology awareness, with the ability to convey complex or technical topics in a clear and concise manner.   Required Education  Bachelor's degree (BA / BS) in Computer Science from four-year college or university; or equivalent training, education, and work experience.
  • Cybersecurity certifications such as CISSP, CISM, etc.
  • Preferred Education Cybersecurity certifications such as CISSP, CISM, etc.   Powered by JazzHR
    • [job_alerts.create_a_job]

    Security Engineer • US

    [internal_linking.similar_jobs]
    Security Analyst III - Hybrid

    Security Analyst III - Hybrid

    Charles Schwab • US
    [job_card.full_time]
    At Schwab, you’re empowered to make an impact on your career.Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry togeth...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    AI Security Architect (USA / Remote)

    AI Security Architect (USA / Remote)

    MRINetwork Jobs • Independence, KS, US
    [filters.remote]
    [job_card.full_time]
    Company : Established and fast growing company in Healthcare industry.Position Type : Full time / Perm.Compensation : Up to 160K plus great benefits. This healthcare technology firm is transforming the...[show_more]
    [last_updated.last_updated_30] • [promoted]
    SIU Investigator - P&C (Mid-level) - Multi-line (PORTLAND)

    SIU Investigator - P&C (Mid-level) - Multi-line (PORTLAND)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Interested in learning more about ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator - P&C (Mid-level) - Multi-line - Military community-focused workplace (WORCESTER)

    SIU Investigator - P&C (Mid-level) - Multi-line - Military community-focused workplace (WORCESTER)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Interested in learning more about ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator - P&C (Mid-level) - Multi-line (WASHINGTON D.C.)

    SIU Investigator - P&C (Mid-level) - Multi-line (WASHINGTON D.C.)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Interested in learning more about ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (VA, WV or TN) (MEMPHIS)

    SIU Investigator (mid-level) - P&C (VA, WV or TN) (MEMPHIS)

    Usaa • US
    [job_card.full_time]
    Read all the information about this opportunity carefully, then use the application button below to send your CV and application. At USAA, our mission is to empower our members to achieve financial ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator P&C (Mid-Level) - Las Vegas Metro (LAS VEGAS)

    SIU Investigator P&C (Mid-Level) - Las Vegas Metro (LAS VEGAS)

    Usaa • US
    [job_card.full_time]
    Apply (by clicking the relevant button) after checking through all the related job information below.At USAA, our mission is to empower our members to achieve financial security through highly comp...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator P&C (Mid-Level) - Desk - Focus on desk-based investigations with a strong emphasis on property expertise (LOS ANGELES)

    SIU Investigator P&C (Mid-Level) - Desk - Focus on desk-based investigations with a strong emphasis on property expertise (LOS ANGELES)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Before applying for this role, ple...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator - P&C (Mid-level) - Multi-line (BOSTON)

    SIU Investigator - P&C (Mid-level) - Multi-line (BOSTON)

    Usaa • US
    [job_card.full_time]
    The following information aims to provide potential candidates with a better understanding of the requirements for this role. At USAA, our mission is to empower our members to achieve financial secu...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (VA, WV or TN) (ROANOKE)

    SIU Investigator (mid-level) - P&C (VA, WV or TN) (ROANOKE)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Are you the right candidate for th...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator P&C (Mid-Level) - Desk (LOS ANGELES)

    SIU Investigator P&C (Mid-Level) - Desk (LOS ANGELES)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Before applying for this role, ple...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (VA, WV or TN) - Remote work flexibility in specified regions (ROANOKE)

    SIU Investigator (mid-level) - P&C (VA, WV or TN) - Remote work flexibility in specified regions (ROANOKE)

    Usaa • US
    [filters.remote]
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. The experience expected from appli...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    Fraud Detection Specialist (NASHVILLE)

    Fraud Detection Specialist (NASHVILLE)

    Usaa • US
    [job_card.full_time]
    Read all the information about this opportunity carefully, then use the application button below to send your CV and application. At USAA, our mission is to empower our members to achieve financial ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (VA, WV or TN) (VIRGINIA BEACH)

    SIU Investigator (mid-level) - P&C (VA, WV or TN) (VIRGINIA BEACH)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Are you the right candidate for th...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (Washington or Oregon) (BREMERTON)

    SIU Investigator (mid-level) - P&C (Washington or Oregon) (BREMERTON)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Scroll down the page to see all as...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    Mid-Level or Senior Product Security Log Analytics Engineer

    Mid-Level or Senior Product Security Log Analytics Engineer

    Boeing • US
    [job_card.permanent]
    At Boeing, we innovate and collaborate to make the world a better place.We’re committed to fostering an environment for every teammate that’s welcoming, respectful and inclusive, with great opportu...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    SIU Investigator (mid-level) - P&C (VA, WV or TN) (RICHMOND)

    SIU Investigator (mid-level) - P&C (VA, WV or TN) (RICHMOND)

    Usaa • US
    [job_card.full_time]
    Read all the information about this opportunity carefully, then use the application button below to send your CV and application. At USAA, our mission is to empower our members to achieve financial ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]
    Multi-line Fraud Detection Specialist (WASHINGTON D.C.)

    Multi-line Fraud Detection Specialist (WASHINGTON D.C.)

    Usaa • US
    [job_card.full_time]
    Why USAA? At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. Interested in learning more about ...[show_more]
    [last_updated.last_updated_1_day] • [promoted]