Senior Threat Hunter - Cyber Threat Intelligence Analyst

About the Role

We invite experienced cybersecurity professionals to join our team as a Senior Cyber Threat Intelligence Analyst. This role demands a proactive expert skilled in monitoring threat intelligence, producing detailed reports, and handling various threat intelligence platforms. You will be instrumental in developing and maintaining customized threat intelligence feeds, integrating these into SIEM systems, and crafting client-focused analytical reports. The position requires working during the EST timezone (evening shifts) to coordinate with onshore teams, including availability for urgent on-call responsibilities.

Core Responsibilities

• Use platforms such as ZeroFox, Digital Shadows, and similar tools to monitor and analyze cyber threat intelligence.
• Author in-depth, technical cybersecurity reports with meticulous attention to detail.
• Leverage OSINT techniques, IOC validation, Domain Registrar queries, VirusTotal, and Dark Web investigations to gather intelligence.
• Build, update, and enhance tailor-made threat intelligence feeds using solutions like MISP along with scripting capabilities in Python, Azure, and Linux.
• Manage feeds with tools including Anomali, ThreatQ, Cyble, Cyware, OpenCTI, and MISP.
• Integrate intelligence feeds effectively into SIEM platforms, particularly Microsoft Sentinel.
• Conduct necessary domain and social media account takedowns for threat mitigation.
• Generate custom reports aligning with specific client needs.
• Apply recognized frameworks such as MITRE ATT&CK, D3F3ND, and Cyber Kill Chain for threat analyses.
• Utilize Excel and Power BI for visualization, including tasks like data cleansing, Pivot Tables, and VLookups.
• Prepare and deliver presentations via PowerPoint to stakeholders.
• Communicate proficiently in English, both verbally and in writing.
• Work autonomously under pressure, prioritizing assignments effectively.
• Maintain readiness for on-call duties during critical situations.
• Coordinate with Managed Security Service Providers (MSSPs) for both backend technical work and client interactions.

Required Qualifications

• At least three years’ experience with threat intelligence monitoring tools.
• Minimum one year of experience in preparing threat intelligence reports.
• Expertise in OSINT, IOC validation, Domain Registrar lookups, VirusTotal, and Dark Web research.
• Proficient in scripting using Python, as well as working with Azure and Linux environments.
• Experience with managing threat intelligence feeds on platforms such as Anomali, ThreatQ, Cyble, Cyware, OpenCTI, or MISP.
• Hands-on experience integrating feeds into SIEMs, especially Microsoft Sentinel.
• Demonstrated success in conducting domain and social media account takedown operations.
• Deep understanding of frameworks including MITRE ATT&CK, D3F3ND, and the Cyber Kill Chain.
• Excellent command of written English.
• Ability to visualize data effectively through Excel and/or Power BI, with knowledge of data cleansing and advanced features like Pivot Tables and VLookups.
• Skilled in developing and delivering presentations with PowerPoint.
• Fluent verbal communication skills in English.
• Relevant cybersecurity certifications (COMPTIA, SANS GIAC, ISC, EC-Council) are advantageous, particularly those focused on cyber threat intelligence.
• Capacity to operate within EST timezone evening shifts to maintain overlap with client teams.
• Strong analytical capabilities paired with effective prioritization of responsibilities.
• Experience interfacing with MSSPs in both backend and client-facing roles.

Preferred Attributes

• Familiarity with additional threat intelligence platforms beyond the core set.
• Advanced skills in technical writing and comprehensive reporting.
• Robust analytical and problem-solving competencies.
• Ability to work independently as well as collaboratively within a team environment.

Company Overview

We strive to create a better working world by instilling confidence and innovation across clients, employees, society, and the environment. Leveraging data, artificial intelligence, and advanced technologies, our global, multi-disciplinary teams deliver services including assurance, consulting, tax, strategy, and transactions across over 150 countries. Join us to evolve your career in a dynamic, diverse, and impactful setting.