Job details
Job type full-time
Full job description
Digital shadows is fast growth company with offices in london, san francisco, dallas, frankfurt and singaporeOur mission is to protect organizations from external digital risks across the open, deep, and dark webWe do this by providing relevant threat intelligence, context, expertise, and remediation that enables organizations and security teams to focus on their core business in the digital eraOur searchlight™ service combines scalable data analytics with threat intelligence analysts to monitor for cyber threats, data leakage, reputation risks and a whole lot moreYou can learn more about us at www.digitalshadows.com or review the forrester new wave report where we were named the leader in digital risk protection.
We are currently seeking a vulnerability intelligence analyst that can apply their theoretical and practical knowledge of vulnerabilities to support the production of client facing photon intelligence productsThis is a tactical role and the successful candidate will be responsible for reporting on major vulnerabilities, analyzing data feeds, and providing in-depth analysis on how vulnerabilities can impact clients.
Role and responsibilities
Deliver tactical vulnerability intelligence to support the photon team’s production of searchlight intelligence
Conduct research into vulnerabilities and malware and provide insights into how these could manifest as cyber threats drawing on industry feeds, proprietary data and multiple sources including primary and restricted-access sources
Drive the creation of client-facing threat profiles available in the searchlight portal
Support client requests for intelligence (rfis) as needed
Share knowledge, to support all photon team members
Support the cyber threat intelligence leads and managers in developing vulnerability intelligence products
Requirements
3+ years experience, ideally in a vulnerability intelligence, penetration testing or network intrusion analysis based role
Sound technical understanding of hardware and software-based vulnerabilities
Experience with vulnerability assessment products and tooling
Ability to use suitable coding/scripting languages (preferably python or java)
Familiar with diamond model, cyber kill chain, and att&ck/d3fend frameworks
Demonstrated writing ability and able to explain complex technical subject matter to non-specialists
A university degree or equivalent education (i.eComputer science, cyber security, data science) with strong academic results or equivalent professional experience
Comfortable working in cross functional intelligence teams
Inquisitive and curious mindset when it comes to threat identification, threat hunting
Willing and eagerness to learn and able to adapt with the growth of the business
Up-to-date insights into current exploit techniques, vulnerability disclosures, data breach incidents, and security analysis techniques, combined with the understanding of the potential impact on an organization’s security posture
Desirable
Security operations or incident response experience preferred but not required
Experience of red-teaming events and penetration testing practices
Foreign language skills are a plus, especially key languages (russian, mandarin, farsi)
Soft skills including coaching and mentoring
Benefits
Generous compensation package which includes; competitive salary, annual bonus, stock options and expense reimbursements related to travel and remote working.
Excellent benefits; generous health insurance, paid time off (pto), volunteering days, paid parental leave, paid military leave, paid sick leave, long service award of additional pto, employee assistance program and mental health support.
Spirited and energetic culture; regular team building events (in-person and online), monthly employee care packages, employee engagement activities with prizes, weekly updates from our cofounders, employee thank you cash awards, company swag!
Career development: in-house training programs and online learning management platforms, employee career path programs, professional certification and eduction support.
