Threat Intelligence Specialist

Employer: Secureworks
Domain:
  • IT Hardware
  • IT Software
  • Job type: full-time
    Job level: 1 - 5 years of experience
    Location:
  • BUCHAREST
  • Updated at: 14.11.2018
    Short company description

    Dell Secureworks is a global leader in providing intelligence-driven information security solutions. We play an important role, as no organization in the world is immune from cyber attacks and the nature of the attack is changing every day.

    Requirements

    Requirements

    Bachelor’s degree or higher-level education or work experience equivalent.
    2+ years experience in Information Security
    Excellent written and verbal communication skills
    Passionate, collaborative and results oriented
    Clear understanding of and ability to manage cognitive biases
    Ability to relate same to development of information and intelligence reports
    Detailed knowledge of Windows and/or Linux systems and associated scripting languages
    Entry level security certification (CompTIA Security+, Microsoft MTA Security, ISACA CSX, GISF, SSCP)
    Demonstrated experience working with any of the following:
    Security Information and Event Management
    Vulnerability Management
    Endpoint Security
    Web Security
    Incident Response
    Detailed knowledge of Firewalls, Enterprise E-mail Systems and / or Incident Management.
    Log analysis capabilities for various security systems or infrastructure devices
    Attention to detail and focus on providing vetted information
    Desired Skills

    Intelligence Community experience and/or experience at an international institution conducting cyber or security/intelligence related work
    Working knowledge of global threats to international cyber security, and conversant in the tactics, techniques and procedures used by cyber adversaries
    Experience with analytical problem solving and familiar with conducting operations relating to insider threat, counterintelligence investigations, and counterespionage.
    Certifications: GCIA, GPEN, GWAPT, GCIH, GSEC, OSCP, OSCE, OSCP, or similar certification
    Certifications: Insider Threat Program Manager (ITPM), Insider Threat Vulnerability Assessor (ITVA)
    Microsoft`s MCSA / MCSE certifications
    4+ years experience in Information Security
    Static and dynamic malware analysis
    Scripting knowledge: Perl, Python, PowerShell, JSON, VBScript

    Responsibilities

    Monitor external intelligence ingestion and provide metrics for management
    Contribute to periodic intelligence reports and summaries on various actors and events to senior leadership; participate in related company and/or industry joint intelligence operations activities
    Provide support and for the organization’s day-to-day counterintelligence and insider threat programs
    Maintain knowledge of the threat landscape by monitoring open and closed intelligence sources
    Conduct deep-dive intelligence analysis of suspicious activity and attempted attacks
    Automate responses to intelligence sources establish end-to-end playbooks
    Collaborate with the Information Security team to provide quick response and have an up-to-date view of current enterprise security status, capabilities and risk exposure
    Build upon existing capability, recommending cutting-edge tools and procedures to detect threats and protect the firm’s intellectual property and assets
    Produce and share confirmed indicators and intelligence with trusted communities
    Continuous improvement of relevant intelligence sources and methods
    Maintain current workflows and develop new ones as needed
    Implement and maintain API integrations between internal systems to provide enrichment and support workflows
    Advise incident responders as they develop and coordinate response, containment and remediation capabilities as appropriate
    Assisting entities in support of formal investigations and/or inquiries to resolve insider threat related matters, employee misconduct, or violations of law

    Other info

    We are looking for a motivated Threat Intelligence Specialist in Bucharest, Romania to join our current team. The successful candidate will perform as a multi-disciplinary analyst employing various skills and experiences to identify anomalous behavior indicative of an outsider or insider threat; and uses host-based insider threat detection, analysis and correlation tools to develop a comprehensive picture of the potential threat. The analyst will collect, review, interpret, correlate and analyze related data to identify behavior indicative of a potential threat.