Senior Threat Intelligence Response Analyst

The Role: This Threat Intelligence Response Analyst position is filling a vital role within Recorded Future’s Managed Services Group by validating and escalating Intelligence and Security Incidents to Recorded Future’s massive client base. 

Recorded Future supports information security teams at some of the most ambitious organizations on the planet. Your days will be spent working closely with teammates on escalated incidents as a Tier 2 Analyst. Other day to day activities include developing new service offerings and standard operating procedures and interacting directly with clients as a subject matter expert. You are passionate about technology, cyber security, threat intelligence as well as building a world class threat intelligence business. 

What You’ll Do: 

• Cover Tier 2 Analyst Shift Hours from 9am-5pm 
• Perform Tier 2 alert review and triage of escalated incidents on areas including phishing emails, phishing and credential harvesting sites, code and data leakage, tracking nation state and criminal threat actors and social media monitoring 
• Research and implement new tools and data sources to expand analysis and incident response capabilities 
• Assist clients with use case development, query development and alert tuning
• Enhance existing Services and the development of new Managed Threat Intelligence Services 
• Modify Standard Operating Procedures to assist Tier1 and Tier2 analysts with repeatable daily work 
• Partner with clients and effectively relay strategic and technical messages to stakeholders ranging from analysts to executives ranging from analysts to executives 

What You’ll Bring: 

• Any combination of threat intelligence, incident response, or security monitoring experience 
• Experience triaging phishing emails 
• Understanding of open source intelligence and response techniques pertaining to phishing and credential harvesting attacks, domain and web infrastructure monitoring, social media monitoring, dark web monitoring, malware delivery techniques, threat actor and TTP Profiling 
• Experience Working in Incident/Case Management and SOAR Platforms ● Strong troubleshooting, analytical and critical thinking skills 
• Strong communication and presentation skills 
• Ability to travel up to 25% when covid restrictions are lifted