CTI - Senior

Job Description: Senior Cyber Threat Intelligence Analyst

Position Overview: We are seeking a highly skilled and experienced Senior Cyber Threat Intelligence Analyst to join our cybersecurity team. The ideal candidate will have a strong background in threat intelligence monitoring, report writing, and the use of various threat intelligence platforms. This role requires a proactive individual who can develop and sustain custom threat intelligence feeds, integrate them into SIEMs, and provide in-depth reporting tailored to client needs. The candidate must be comfortable working in the EST timezone (evening shift for overlap with onshore/client team ) and be on-call for high-priority urgent tasks.

Key Responsibilities:

• Monitor and analyze threat intelligence using tools such as ZeroFox, Digital Shadows, or similar platforms.


• Write comprehensive and technical cybersecurity reports with strong attention to detail.


• Utilize OSINT, IOC lookup and validation, Domain Registrar lookups, VirusTotal, and Dark Web search for threat intelligence gathering.


• Develop, sustain, and enrich custom threat intelligence feeds using platforms like MISP, with scripting in Python, Azure, and Linux.


• Manage threat intelligence feeds using platforms such as Anomali, ThreatQ, Cyble, Cyware, OpenCTI, and MISP.


• Integrate threat intelligence feeds into common SIEMs, particularly Microsoft Sentinel.


• Execute domain and social media account takedowns as necessary.


• Create custom, in-depth reports specific to client requirements.


• Apply knowledge of MITRE ATT&CK, D3F3ND frameworks, and the Cyber Kill Chain in threat analysis.


• Utilize Excel and/or Power BI for data visualization and graph creation.


• Experience with excel data cleansing, VLookups, Pivot Tables


• Prepare and deliver PowerPoint presentations and reports to stakeholders.


• Maintain strong verbal and written communication skills in English.


• Work independently under pressure and prioritize tasks effectively.


• Be available for on-call duties for high-priority urgent tasks.


• Collaborate with Managed Security Service Providers (MSSPs) for backend and client-facing work.

Qualifications:

• Minimum of 3 years of experience with threat intelligence monitoring tools.


• At least 1 year of experience in threat intelligence report writing.


• Proficiency with OSINT, IOC lookup and validation, Domain Registrar lookups, VirusTotal, and Dark Web search.


• Experience with scripting in Python, Azure, and Linux.


• Familiarity with one or more threat intelligence platforms for feed management.


• Experience integrating threat intelligence feeds into SIEMs, especially Microsoft Sentinel.


• Proven experience with domain and social media account takedowns.


• Strong understanding of MITRE ATT&CK, D3F3ND frameworks, and the Cyber Kill Chain.


• Excellent English writing skills.


• Proficiency in Excel and/or Power BI for data visualization.


• Strong experience with PowerPoint presentations and reporting.


• Strong verbal English and presentation skills.


• Cybersecurity certifications (e.g., COMPTIA, SANS GIAC, ISC, EC-Council) are a plus.


• Certifications specific to cyber threat intelligence are an asset.


• Ability to work in the EST timezone (evening shift for overlap with onshore/client team ).


• Strong analytical skills and ability to prioritize tasks effectively.


• Experience working with MSSPs for backend and client-facing work.

Preferred Skills:

• Experience with additional threat intelligence platforms.


• Advanced technical writing and reporting skills.


• Strong analytical and problem-solving abilities.


• Ability to work independently and as part of a team.