F

FTI Consulting

Global advisory for restructurings, investigations

Consultant Cyber Threat Intelligence Intern - Digital Forensics, DFIR

Security Operations & Incident ResponseConfirmed live in the last 24 hours
InternshipParis, FranceNo salary listed

About the Job

Requirements

  • Currently pursuing a Bac+5 qualification at an engineering school or university.
  • Have a first experience through an internship, apprenticeship, or project in cyber threat intelligence, a security operations center, a computer emergency response team, or incident response.
  • Have foundational knowledge of forensic analysis in Windows and Linux environments.
  • Have technical familiarity and use Python or Bash scripting.
  • Be proficient in spoken and written English.
  • Work with open-source intelligence and the dark web.

Responsibilities

  • Contribute to incident response, cyber threat intelligence, and investigation cases alongside senior analysts.
  • Produce tactical, operational, and strategic intelligence from open, dark-web, and commercial sources.
  • Profile advanced persistent threat groups, cybercriminal groups, and ransomware-as-a-service operations, including tactics, techniques, and procedures, infrastructure, indicators of compromise, and detection recommendations.
  • Investigate infostealer activity by analyzing logs, stolen credentials, session cookies, and tokens, tracing activity to the infected workstation and initial access.
  • Monitor log markets and Telegram channels, assess client and executive exposure, and prioritize remediation.
  • Conduct intelligence-led threat hunting and contribute to detection engineering.
  • Apply MITRE ATT&CK, the Diamond Model, the Cyber Kill Chain, and analysis standards such as analysis of competing hypotheses and confidence levels.
  • Support major incidents, including ransomware, Active Directory compromise, executive fraud, and data leaks, with international multidisciplinary teams.
  • Conduct forensic analysis of workstations, servers, and cloud environments, including acquisition, timelines, Windows and Linux artifacts, logs, and memory.
  • Reconstruct attack kill chains, identify patient zero, persistence and exfiltration mechanisms, and contribute to attribution.
  • Produce rigorous, traceable forensic findings that can withstand scrutiny by regulators or courts.
  • Conduct threat-actor profiling and intelligence analysis.
  • Produce operational and executive deliverables under tight time constraints.
  • Conduct open-source intelligence and dark-web investigations into entities, individuals, and third parties.
  • Identify executive exposure, brand impersonation, fraudulent domains, and credential leaks.
  • Contribute to development of the Digital Risk Protection offering and takedown activities.
  • Use original-language sources, including Russian-speaking cybercriminal forums and Chinese ecosystems and publications, to produce first-hand intelligence.
  • Track state actors and analyze the impact of geopolitical tensions on clients.
  • Write sector threat overviews, including for sectors subject to DORA and NIS2.
  • Prepare intelligence briefings for executive committees and boards of directors.
  • Contribute to cyber threat intelligence collection, research, and bulletin production.
  • Automate cyber threat intelligence workflows for collection, enrichment, correlation, and triage using Python, APIs, and Docker.
  • Experiment with and deploy large language models for intelligence tasks such as translation, summarization, and entity extraction.
  • Contribute to the regional shared OpenCTI knowledge base.
  • Support other FTI Consulting engagements, including cyber M&A due diligence, maturity assessments, fraud and financial investigations, penetration testing, and security audits.
  • Contribute to commercial proposals and the growth of the Global Service Line.
  • Lead an innovation project applying artificial intelligence to intelligence work.
  • Write analyses and participate in client presentations.

Desired Qualifications

  • CTF participation, personal research, or publications are appreciated.
  • Russian or Mandarin Chinese language skills are desirable.

About the Company

FTI Consulting

Global advisory for restructurings, investigations

FTI Consulting is a global business advisory firm that helps organizations manage change, mitigate risk, and resolve disputes in high-stakes settings like restructurings, litigation, investigations, antitrust reviews, and reputational crises. It offers five segments: Corporate Finance & Restructuring; Forensic and Litigation Consulting; Economic Consulting (Compass Lexecon); Technology for e-discovery and information governance; and Strategic Communications for reputation and public affairs. The firm's services combine finance, investigations, economics, technology, and communications to provide end-to-end support, from turnarounds to expert testimony and risk management. Its goal is to help clients navigate complex changes, reduce risk, and resolve disputes across various industries.

Company size
10,001+
Company stage
IPO
Headquarters
Baltimore, MD
Founded
1982

Recently Posted Jobs

Explore more opportunities at FTI Consulting

See more jobs