Job Description

Overview: The Senior Cyber Intelligence Analyst is responsible for leading the technical cyber intelligence function for the Cyber Fusion Center.
The Cyber Intelligence Analyst will use all sources of technical data collection and analysis in order to produce a common operating picture of intrusion or threat related activity. This includes developing and maintaining new technical and non-technical sources of information, threat research, threat profile development, analysis, briefings, and warnings.

Establish a threat modeling methodology to identify, classify, prioritize and report on cyber threats using a structured approach.

• 
  Develops a portfolio of historical threat activity, trends and common attack vectors to predict future incidents.

• Provide awareness to internal teams and leadership on changes to the cyber threat landscape through various products.

• Publish internal threat intelligence products and intelligence briefings to provide actionable information to tactical and strategic

• Collect information on threats to the organization through communication with other partner institutions, mailing lists, open source news, and industry partnerships.

• Use threat intelligence to inform and develop threat detection strategies and to build out and update the alert catalogue.

• Establish relationships between the GTMR team and other groups, both internal (e.g., legal department, fraud) and external (e.g., law enforcement agencies, vendors, and public relations professionals).

• Present relevant cyber intelligence findings to variety of audiences (Senior Leadership, IT Teams, User communities, ).
• Participation in after hours on-call rotation when required

• Foundational knowledge in information technology, to include hardware, networking, architecture, protocols, files systems and operating systems.
• Knowledge of network security technologies, log formats, SIEM technologies, and security operations
• Strong collaborative skills and proven ability to work in a diverse global team of security professionals
• Strong organizational skills and mentoring
• Strong verbal and written skills
• Excellent interpersonal skills

• 5+ years of experience with conducting all-source intelligence or a combination of intelligence and research with threat detection or incident response work
• Experience with current and historical Threat Actor Group(s) TTPs
• Experience with threat intelligence tools & management platforms
• Intimate knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, Diamond Model of Intrusion Analysis, or other relevant network defense and intelligence frameworks
• Experience with collecting, analyzing, and interpreting data from multiple sources, documenting the results and providing meaningful analytic products
• Knowledge of the principal methods, procedures, and techniques of gathering information and producing, reporting, and sharing intelligence
• Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs)
• Knowledge of intelligence agencies and processes and cyber fusion centers