Threat Intelligence Analyst

Team Cymru offers the following benefits for U.S. employees:

• A remote-first organization: work where you are comfortable
• 100% employer-funded health, dental, and vision benefits for you and your dependents
• 4 weeks Paid Parental Leave
• Life insurance
• 401(k) with employer match
• Employee rewards and bonuses
• Generous 28 days of vacation for all employees plus holidays
• Company break at the end of each year
• 24/7 Access to Employee Assistance Program
• Fitness Membership Stipend
• Telephone/Internet Service Fee Stipend
• Career Development Training

Please reach out for more information about benefits for non-U.S. employees.

Job Summary:

Team Cymru analysts make a difference every day, leading in the battle against those intent on harming others. We are passionate about our mission, and we are looking for additional teammates who share in that passion. Do you have a strong background in analytic tradecraft, deductive reasoning, and critical thinking? Would you like to have access to our industry leading Threat Intelligence? Are you a proven teammate, mentor, and technical leader? Would you like to join the battle and make a difference in the world? If so, opportunity knocks.

Team Cymru analysts work on research and reporting pertaining to our customers' security, empowering our customers to effectively and efficiently complete their mission. Additionally, our analysts undertake research into other threats, and work closely with our technology teams in the development of our world class analytical tools suite, data analytics systems, and analysis automation, as well as adding to the body of knowledge of those threats. As a Threat Intel Analyst, you will provide that vital bridge between technical and strategic intelligence research, writing for the most senior leadership to understand the impact of the threat, while explaining the technical details and rationale behind those assessments - the best of both worlds!

Duties/Responsibilities:

• Work with customers, producing written intelligence reports pertinent to their threat landscape.
• Investigate and present operational and strategic intelligence about threat actors.
• Evaluate tools, methodologies, and best practices to understand the tactics, techniques, and procedures (TTPs) utilized by threat actors.
• Mentor junior analysts and demonstrate how to derive analytic value using our technology suites.
• Lead project-based teams and analysis efforts, to include short and long-term threat tracking.
• Composition of highly tailored and actionable Threat Intelligence reporting based on tasking.

Required Skills/Abilities:

• Exceptional oral and written communication skills, with a proven ability to produce customer-facing intelligence reports.
• Effective organizational skills with the ability to prioritize and execute.
• Proven track record of leading teams and projects
• Ability to work effectively in a distributed team environment.
• Well-developed analytical and problem-solving skills
• Network infrastructure and traffic analysis (PCAP, Netflow, PDNS)
• Deep working knowledge of IP networking and services; including standard Internet protocols such as DNS, HTTP/HTTPS, and VPNs, as well as routing protocols.
• Demonstrated knowledge of operating system concepts
• Experience developing indicators of compromise (IOCs) and an understanding of how they can be used/deployed in various detection architectures at host or network level.
• Experience with analytic visualization tools (e.g., Maltego, Analyst Notebook)
• Effective programing or scripting skills (Python preferred)
• Subject Matter Expert (SME) for regional or cyber threat actors TTPs
• Experience with basic malware analysis and network analysis (YARA, Sigma, Suricata, Sandbox reporting)

Education and Experience:

5+ years of experience as a Threat Intelligence Analyst, network forensics analyst, or IT security analyst.

Physical Requirements:

Prolonged periods of sitting at a desk and working on a computer.

Location:

Remote

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change, or new ones may be assigned at any time with or without notice.

All qualified applicants will receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, disability, veteran status, age, marital status, pregnancy, genetic information, or other legally protected status.

PI