Senior Threat Intelligence Analyst

Overview

As a Principal Threat Intelligence Analyst at MSTIC, you will translate real-time intrusion activity into actionable threat intelligence at scale. You’ll identify emerging adversaries and influence defenses across on-premises and cloud environments. You will drive proactive defense, threat hunting tooling, and knowledge transfer to customers and engineering teams. This role offers the chance to shape product hardening and disrupt attacker tradecraft at a global scale.

Responsibilities

• Discover attacker activity across on-premises and cloud environments and translate findings into actionable intelligence
• Identify potential threats to enable proactive defense and customer notification before incidents
• Provide recommendations to improve customers’ cybersecurity posture and transfer threat intelligence knowledge
• Develop proof-of-concept threat hunting tools, automations, and new capabilities
• Convey threat intelligence learnings to engineering partner teams to drive product and tooling improvements
• Utilize large-scale query workflows to distill adversary signals from vast activity and focus on what matters

Key requirements

• Doctorate in Statistics, Mathematics, Computer Science, Computer Security, or related field OR Master’s Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND proven experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR Bachelor’s Degree in Statistics, Mathematics, Computer Science, Computer Security, or related field AND substantial experience in software development lifecycle, large-scale computing, threat analysis or modeling, cybersecurity, vulnerability research, and/or anomaly detection OR equivalent experience.

• Curiosity and ingenuity
• Advanced problem solving
• Analytic writing for technical and executive audiences
• SQL or KQL familiarity
• Experience with large database/SIEM query languages (Splunk/Humio/Kibana)
• Endpoint, email, and cloud forensic log artifacts analysis

…