Job details
Job type full-time
Full job description
Team cymru is the leader in internet threat intelligenceTeam cymru pure signal[tm] – our unique and global insight – empowers an amazing team of analysts to develop industry leading intelligence that is critical to the success of our customer’s cyber security effortsTeam cymru is an ardent supporter of the threat intelligence communityIn addition to enabling industry collaboration through exclusive conferences a year, team members actively participate in working groups, attend industry events, and collaborate with the community.
Job description
We are passionate about what we do, and we are looking for like-minded teammatesDo you have a strong background in analytic trade craft, deductive reasoning, and critical thinking? would you like to have access to our industry leading threat intelligence? are you a proven teammate, mentor, or technical leader? if so, opportunity knocksThrough investigations, research and reporting, team cymru analysts are regularly exposed to, and contribute to, the investigation of the latest sophisticated threats or wider topics related to the use of the internetTheir work feeds directly to partners and customers, helping them achieve their missionWe are seeking a threat intelligence analyst who not only excels at conducting investigations but who can also provide the vital bridge between technical and strategic intelligence research, assessing the impact of a threat, whilst also explaining their reasoning to a variety of audiences of different technical knowledge levels.
Primary responsibilities
Run, and manage, your own investigations and research projects
Contribute significantly to wider team investigations and research
Generate, collect, and enrich focused threat intelligence
Undertake investigations utilizing a variety of indicators (from personas to network details) to develop intelligence meeting customer requirements
Produce accurate and readable reports and presentations, using carefully selected wording, and tailored to specific audiences
Ongoing development of knowledge and skills
Helping develop the analysis team, and teammates, through technical leadership and support
Requirements:
5+ years of experience as a threat intelligence analyst, network forensics analyst, or osint investigator
Exceptional oral and written communication skills, with a proven ability to produce customer-facing intelligence reports
Data set expertise: netflow or pcap, passive dns, x.509 certificates,
Proficient data manipulation skills; familiarity with jupyter notebooks an advantage
Ability to work effectively in a remote distributed team environment
Experience tracking nation-state threat actors, or similar types of investigation
Confident personality with the ability to deal with future unknown tasking or ambiguity
Deep working knowledge of ip networking and services (dns,http/https,vpns, and routing protocols)
Foundational knowledge of operating system concepts as it relates to the network stack (client & server)
Highly desirable skills:
Experience with analytic visualization tools (e.gMaltego, analyst notebook)
Effective programing or scripting skills (python preferred)
Experience of reverse engineering malware (yara, sigma, sandbox reporting)
Network infrastructure and traffic analysis (pcap, netflow, pdns)
Subject matter expert (sme) for regional or cyber threat actors ttps
Our culture is fast-paced, team-oriented, and mission-focusedOur culture is geared towards the intellectually curious self-starter, with ample opportunities to explore, research, and develop new and unique solutionsWork location is flexible, with many of our teammates working remotely from home at all times.
