Lead / Principal / Senior Cyber Threat Intel Analyst

Brief Summary

Join a dynamic team as a Cyber Threat Intelligence Analyst, where you'll play a crucial role in safeguarding critical systems within the transportation sector. Utilize your expertise to identify and analyze emerging cyber threats, transforming data into actionable insights.

Responsibilities

• Lead and enhance the Threat Intelligence (TI) function, implementing Standard Operating Procedures (SOPs) and solutions for intelligence collection and dissemination. Conduct in-depth research on the tactics, techniques, and procedures (TTPs) of threat actors, focusing on the Asia-Pacific region and Industrial Control Systems (ICS). Curate and maintain monitoring lists, including Indicators of Compromise (IOCs), for integration into SIEM, EDR, and network analysis tools. Develop technical detection artifacts (e.g., YARA, Sigma, Snort rules) based on research findings to improve threat hunting and detection. Serve as the Tier-3 intelligence lead in critical incidents, providing real-time threat context and support to the incident response team. Monitor and assess newly disclosed CVEs, offering actionable risk-based insights to relevant teams. Map adversary behaviors to the MITRE ATT&CK framework, identifying visibility gaps in security controls. Prepare high-quality intelligence reports and strategic summaries for management and operators regarding emerging threats.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related discipline. Minimum of 8 years of experience in cybersecurity, with at least 4 years focusing on Threat Intelligence, Advanced SOC Operations, or Incident Response roles. Holding professional certifications such as GIAC Cyber Threat Intelligence (GCTI) or Certified Information Systems Security Professional (CISSP). Desired technical certifications include GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), or GIAC Reverse Engineering Malware (GREM). Proven experience in mentoring junior analysts and enhancing SOC/CERT capabilities. Strong technical writing and communication skills, capable of briefing senior leadership on complex cyber risk issues. Ability to work effectively in a cross-matrix environment and independently in a high-paced operational setting.