Analyst – Cyber Threat Intelligence

Branch Location Code: 3930, UCMC, Dubai

Position: Analyst - Cyber Threat Intelligence

Salary:  max 13500 AED + single benefits

Duration: 1 yr ext.

Job Location: Client Office (Onsite)

Nationality: Any

Kindly send CVs on or before August 17, MON, 12 pm.

Position

Name of the candidate

DOB

Passport No.

Gender

Notice period

Location

Contact Numbers

Email ID

Nationality

Current Salary

Expected Salary

Agency

MOFA Attested Degree (Y/N)

Job Description: Analyst - Cyber Threat Intelligence

A: Job / Position Information

Job Title (Position Name): Analyst - Cyber Threat Intelligence

B: Job Purpose

The Analyst – Cyber Threat Intelligence will support the CLIENT Digital Defence Center (DDC) in researching and reporting on emerging threats against CLIENT and to strategically shape and guide the approach the taken to protect its people and assets. The analyst will be responsible for responding and analyzing major cyber security incidents, conducting forensic investigations across a complex multi-cloud environment, supporting threat hunting cycles, and purple team engagements.

D: Minimum Qualifications / Experience

Qualifications:

Bachelor’s Degree

Specialisation:

bachelor’s degree level in computer science / engineer (or business).

Professional/Regulatory/Certification Requirements:

• Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)
• Holding any of the following certifications (or working toward / or similar) would be preferred:
  • GIAC Certified Intrusion Analyst (GCIA)
  • GIAC Certified Incident Handler (GCIH)
  • GIAC Certified Forensic Examiner (GFCE)
  • GIAC Certified Forensic Analyst (GCFA)
  • GIAC Continuous Monitoring (GMON)
  • GIAC Defending Advanced Threats (GDAT)
  • GIAC Certified Detection Analyst (GCDA)
  • CREST Certified Threat Intelligence Analyst
  • CREST Certified Intrusion Analyst
  • Offensive Security Certified Professional (OSCP)

Overall Experience (Years):

5-7 Years

Relevant Experience (Years):

3-5 Years

Industry Experience:

Cybersecurity, SOC Operations, cross industry experience

Core Activities Experience:

Around 3+ years of experience in a technical role with Digital Forensics and Incident Response background in the areas of Security Operations, Threat Hunting, Threat Intelligence, Cyber Incident Response, Penetration Testing and Red Teaming.

Skills, Tools, and Systems Experience:

• Experience using Cyber Kill Chain
• Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)
• Demonstrable experience in the use of Digital Forensics tools, techniques and concepts including creating and using Custom tools and scripts
• Demonstrable experience of analyzing and interpreting system, security, and application logs
• Experience with offensive security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks
• Advanced knowledge of operating system internals and security mechanisms.
• Experience analyzing attacker techniques at all stages of a breach.
• Experience in forensics, threat intelligence, incident response
• Skilled working with extremely large data sets, using tools and scripting languages such as: SQL/KQL, Python, Splunk, etc.
• Working knowledge of EDR solutions

E: Job Accountabilities and Weightage

Job Accountabilities (What is done and why)	Weightage (%)
Threat Hunting	30%
Conducts hunt missions on the Business Environment (on-prem, cloud) with the use of Digital Forensics tools & techniques and Custom tools and scripts
Offensive Assessments	20%
Conducts offensive on Business Environment (on-prem, cloud) using security including tools such as Metasploit, exploit development, Open Source Intelligence Gathering (OSINT), and designing ways to breach enterprise networks
Breach Analysis	20%
Analyzes attacker techniques at all stages of a breach with the capability of mapping to ATT&CK framework
Forensics	20%
Performs incident response and forensics of active breaches
Reporting	10%
Reports measurable improvement of overall security posture

F: Communication and Working Relationship

[Content continues...]