Threat Intelligence Analyst 2

At Arctic Wolf we are actively looking for a Threat Intelligence Analyst to join our Cyber Defense Operations team.   This team is part of our Managed Detection and Response and Incident Response Services.  This team provides clients with long-term monitoring and detection solutions which allows them to harness our ability to quickly respond as well as our expertise to stop threats before they turn into more serious and critical incidents. The Threat Intelligence Analyst will utilize threat intelligence data, contribute to publications, generate reports, and identify opportunities to prepare for potential threats. The Threat Intelligence Analyst will manage and lead the Compliance & Data Quality Analyst with the potential to increase the team size up to 3 to 5 technical professionals. 

About You:

You have a passion for cybersecurity and are motivated to learn and grow as an industry professional. You are dependable, have an eye for detail, and have top notch organizational skills. You enjoy conducting deep dive analysis using a variety of OSINT tools and the ability to work as part of a collaborative team. 

This is a hybrid position out of our San Antonio, TX, Eden Prairie, MN, or Pleasant Grove, UT office.

Responsibilities:

• Work closely with the Incident Response, Cyber Defense Operations, and Cyber Risk teams to provide analysis support, intelligence expertise and provide well thought out recommendations on potential threats

• Directly supervise the Compliance and Data Quality Analyst, will provide mentorship, performance management, and verify work as needed

• Fully analyze successful and unsuccessful network and host intrusions by advanced attackers

• Analyze patterns and trends by conducting in depth analysis of threats, tactics, techniques, and indicators of comprise to inform and advise the team of the current threat landscape

• Synthesize cyber intelligence data from multiple data sets and through use of OSINT tools

• Take ownership and accountability of your work and can communicate with technical and non-technical audiences

• Provide extreme attention to detail in threat intelligence reports and publications for internal and external use

Qualifications:

• Required

  • Experience in a client-facing role with a willingness and ability to provide a high-level of customer service while maintaining quality standards

  • Ability to conduct research from multiple open intelligence sources and will provide in depth review and interpretation to assess the significance of findings to be communicated to various stakeholders accordingly

  • Conduct in depth analysis of incidents, threats, risks and associated potential impacts

  • Former professional experience in using Microsoft Excel for complex queries and creating charts, pivot tables, and other advanced functions with data sets

  • Hands-on experience with Domain Tools such as Maltego, Whois, Shodan or other comparable, and experience with managed attribution accounts

  • In depth knowledge and understanding of how to collect threat intelligence information by using OSINT tools and can properly distribute threat intelligence information

  • Demonstrated history of being relied upon to take ownership over tasks, initiatives, and provide communication to appropriate parties under tight timelines

  • In depth knowledge of advanced cyber threats, current attack vectors and trends in cybersecurity

  • Prior mentorship or people management experience

  • Professional work history in a Threat Intelligence role with a consultancy, or comparable position

• Preferred

  • Associate degree or bachelor’s degree in General Information Technology, Computer Networking, Information Security, Computer Science, Digital Forensics, Cybersecurity, related degrees and/or professional equivalent experience

  • Data visualization and dashboarding experience with a business intelligence tools such as Tableau, Zoho, Microsoft Power BI or others

  • Prior experience with EDR, MDR and/or any SIEM tools

  • Industry certifications such as:  CISSP, GCTI or other relevant certifications