Lookup join... us!

Today, we want to continue pursuing this path, because there is no great company without great professionals.

Senior Threat Intelligence Analyst

Rome office/Italy

The ideal candidate has a technical background and proven professional experience working with OSINT and CLOSINT information retrieval and analysis in the context of cyber threats.

In particular, the candidate must know how to collect IOCs, develop security measures, identify malicious threats through TTPs (techniques, tactics, and procedures), and automate information flows in order to obtain key data that can be used for analysis and reporting.

The candidate has the following specific knowledge and/or experience and/or skills:

• At least five years of experience working with cybersecurity and intelligence
• Knowledge of Advanced Persistent Threats (APT) tactics, techniques, and procedures
• Good understanding of how network protocols work (TCP/IP, DNS, TLS, etc.)
• Knowledge of the primary information gathering tools, such as Maltego, TheHarvester, Shodan, Censys, etc.
• Proven ability to translate complex data sets into specific information the can be shared with security teams
• Ability to perform threat intelligence research on the primary platforms dedicated to cybersecurity
• Ability to analyze security events and subsequently monitor the relevant instrumentation
• Knowledge of the MITRE ATT&CK framework
• Certifications in security and intelligence (SANS, eCTHP, OSCP, etc.)
• Ability to analyze network traffic with major tools (WireShark and similar)
• Good knowledge of malware analysis environments and tools
• Dynamic sample analysis capabilities using sandbox technologies
• Knowledge of MISP and ability to correlate IOCs in a specific context
• Familiarity with the primary operating systems (Windows, Linux, macOS).

The ideal candidate also has:

• Knowledge of the Python or PowerShell/Bash language for creating scripts related to security
• Experience with SIEM applications and security platforms (Splunk, KATA, Sentinel, etc.)
• Awareness of major IDS/IPS systems and perimeter firewalls
• Good textual exposition skills for compiling reports and intelligence analyses.

Official product website: Cyber Risk Vision.

Interested applicants of either sex (Law 903/77) can send their resumes indicating the note in compliance with Legislative Decree 196/2003 on the protection of personal data.