Threat Intelligence

About the job Threat Intelligence & Threat Hunting SpecialistPosition OverviewWe are seeking a Threat Intelligence & Threat Hunting Specialist to proactively identify, analyze, and mitigate advanced threats through comprehensive threat intelligence analysis, threat hunting operations, and deep understanding of attacker tactics, techniques, and procedures (TTPs) to enhance organizational security posture.Key ResponsibilitiesCollect, analyze, and disseminate tactical, operational, and strategic threat intelligence from multiple sourcesMonitor dark web, underground forums, and threat actor communications for emerging threatsAnalyze threat campaigns, malware families, and attack infrastructures to identify organizational risksDevelop threat intelligence reports and briefings for technical teams and executive leadershipMaintain threat actor profiles and track adversary evolution and campaign attributionProactive Threat HuntingConduct hypothesis-driven threat hunting operations using behavioral analytics and anomaly detectionDevelop hunting queries and detection rules using SIEM platforms and security toolsAnalyze network traffic, endpoint telemetry, and log data to identify indicators of compromiseInvestigate suspicious activities and potential advanced persistent threats (APTs)Document hunting methodologies and create repeatable hunting proceduresTTP Analysis & Detection EngineeringMap adversary behaviors to MITRE ATT&CK framework and develop corresponding detection strategiesAnalyze attack techniques including lateral movement, persistence mechanisms, and exfiltration methodsCreate behavioral signatures and hunting rules based on TTP analysisDevelop threat models and attack scenario simulations for security testingCollaborate with incident response teams to enhance detection and response capabilitiesIntegrate threat intelligence into security tools including SIEM, EDR, and network security platformsDevelop automated threat feeds and indicator enrichment processesCreate custom detection rules and hunting playbooks based on current threat landscapeSupport red team exercises and purple team operations for detection validationEstablish threat intelligence sharing relationships with industry partners and government agenciesRequired QualificationsTechnical Skills6+ years experience in threat intelligence analysis and proactive threat huntingExpert knowledge of MITRE ATT&CK framework and adversary TTP analysisProficiency with threat hunting platforms (Elastic, Splunk, Microsoft Sentinel, CrowdStrike)Strong experience with malware analysis, reverse engineering, and forensic investigation techniquesUnderstanding of network protocols, log analysis, and security event correlationKnowledge of threat intelligence platforms (MISP, ThreatConnect, Anomali) and intelligence feedsAnalytical SkillsProven ability to analyze complex attack campaigns and attribute activities to threat actorsExperience with threat modeling, risk assessment, and intelligence report writingStrong understanding of cyber kill chain methodologies and attack lifecycle analysisKnowledge of geopolitical factors influencing threat actor motivations and targetingPreferred QualificationsBachelor's degree in Cybersecurity, Intelligence Studies, or related fieldSecurity certifications (GCTI, GCFA, GNFA, CISSP, CISM)Experience with intelligence analysis methodologies and structured analytic techniquesBackground in military intelligence, law enforcement, or government cybersecurity rolesKnowledge of programming languages (Python, PowerShell) for automation and data analysis #J-18808-Ljbffr