Cybersecurity Intelligence Analyst

Qualification: Bachelor's or Degree in Computer Science, Telecommunications or similar

Knowledge and/or experience:

• Experience leading Threat Intelligence, Digital Surveillance, and Cyber Fraud teams.

• Knowledge of cloud infrastructures and TTPs used by threat actors to compromise these types of architectures.

• Experience of at least 10 years in threat identification, modeling, and management.

• Analytical and investigative capacity, as well as incident response.

• Experience at the malware analysis level, TTP identification, and IOC extraction.

• Experience in producing technical and executive reports.

• Experience in the definition of Threat Identification and Management models.

• Digital forensics of clients who have suffered digital fraud.

• Experience in the design and implementation of automatic management and blocking systems for IOCs.

• Knowledge of the latest threats in the banking sector at a technological and fraud level, as well as the identification of groups and APTs that affect us.

• Advanced knowledge of MITRE ATT&CK and MITRE D3FEND.

• OSINT research for the identification of actors and threats.

• Information gathering and infiltration to learn adversary TTPs.

• Knowledge and experience in the deployment, sizing, and management of TIP architectures (MISP, Minemeld, Maltiverse, SocRadar...).

• Experience in Hunting on XDR and/or SIEM platforms (Splunk, QRadar, XSIAM, Cortex XDR, ElasticSearch...).

• Knowledge and experience in the sizing, deployment, and management of BAS architectures (Mandiant, Cymulate..) and rule creation.

• Knowledge of Vulnerability Management platforms (Qualys, Nessus...)

• Intermediate/advanced knowledge in process automation.

• Intermediate/advanced knowledge in Python development.

• Experience in the construction and execution of Yara rules.

• Intermediate knowledge of operating systems and virtualization, container, and/or orchestration platforms (Linux, Windows, Docker, Kubernetes, Openshift...).

• Intermediate/advanced level of English.

• Knowledge of network protocols and technologies.

Skills:

• Security certifications (CEH, CTIA, SANS, FOR578...)

• Teamwork capacity is essential.

• Critical thinking with high capacity for observation and analysis.

• Good written and verbal communication skills.

• Good planning capacity and orientation towards both objectives and processes.

• Attitude and orientation towards quality and detail.

• Knowledge of LLM models and AI is valued.

• Experience in environments subject to financial system regulations (DORA, SWIFT, PCI...) is valued.

• Investigate threats, IoCs, and TTPs
  • Analyze indicators and techniques of malicious actors to support threat hunting, signature development, and the TIP platform.
• Maintenance of the entity's current model for Threat Identification and Management.
• Maintenance of the entity's automatic IOC blocking system.
• Manage integration projects for security platforms regarding Threat Intelligence, Digital Surveillance, and/or Fraud.
• Support cybersecurity assessments
  • Perform technical analyses and issue recommendations for different levels of the organization.
• Participate in incident response
  • Integrate into the response team when necessary, providing operational intelligence during active incidents.
• Evaluate and improve technical information
  • Review and optimize technical data to maximize its utility in cyber defense.
• Collaborate with vulnerability management
  • Keep the team informed about emerging threats that may affect the organization's exposure.