Cyber Intelligence Analyst

• Basic knowledge of networks and systems (Windows/Linux).
• Familiarity with CTI concepts: IOCs, TTPs, Cyber Kill Chain, and MITRE ATT&CK.
• Ability to write clear technical reports.
• Good level of English (reading technical documentation and reports).
• Analytical thinking, proactive attitude, and a taste for teamwork.

• Previous experience or internships in a SOC.
• Knowledge of CTI formats and platforms 
• Notions of scripting (Python, Bash, or PowerShell) for automation.
• Experience with adversary emulation tools  or Sigma/YARA rules.
• Participation in CTFs, labs, or certifications in the field (e.g., Blue Team Level 1, CompTIA Security+).

• Work in an international company with more than 600 employees and 25 years of experience in the cybersecurity sector.
• Opportunity to learn and develop in a booming sector such as cybersecurity.
• A hybrid and flexible working model, where you decide when to come to the office and when to work from home.
• Be part of a company with a young atmosphere and values of camaraderie, teamwork, and commitment to society and the environment.
• Training and professional development plans.
• Company-funded medical insurance.
• Flexible compensation plan that includes meal vouchers, public transport, childcare, training, among other benefits.
• Mobile phone bill reimbursement.

At aDvens, we are looking for a Cybersecurity professional with an interest in Cyber Threat Intelligence (CTI) to work in our Defensive team. You will work alongside the SOC in the continuous improvement of our detection capabilities, participating in purple team exercises and in the management of threat intelligence applied to daily operations.

• Management of indicators of compromise (IOCs): Identify, evaluate, and incorporate new intelligence sources into our CTI platform, prioritizing the reliability and quality of the indicators, and support their injection and exploitation in the SIEM.
• Purple Team exercises: Participate in the simulation of attack techniques (aligned with MITRE ATT&CK) and in the analysis of their detection, to identify gaps and propose improvements in the SOC rules.
• Detection engineering: Collaborate in the creation, adjustment, and validation of detection rules on our Elastic/OpenSearch-based SIEM.
• Threat Hunting: Perform proactive investigations on logs, telemetry, and behavioral patterns to detect threats not covered by existing detections.
• Threat and vulnerability analysis: Follow the current news on relevant campaigns, actors, and vulnerabilities (especially those actively exploited) and assess their impact for our clients.
• OSINT: Use of open tools and sources for intelligence collection and enrichment.
• Technical documentation: Prepare intelligence reports, exercise results, and detection documentation.
• Project support: Participate in projects assigned by the tutor, providing analysis and technical support.