استشاري أول للاستخبارات السيبرانية – الوصول المتقدم للاستخبارات

As a part of the MTIS Social Media Platform team, you will deliver Mandiant Threat Intelligence Services, including its key service known as Advanced Intelligence Access (AIA). You will provide the organization with access to a dedicated Mandiant Intelligence 'Integrator' who acts as an extension of the customer organization. Your team will work within the broader Mandiant Intelligence business and has experience supporting government and commercial sector customers, often working closely with national intelligence services, large government institutions, energy and finance.

In this role, you will serve as an AIA Integrator, a highly skilled cyber threat analyst and consultant, backed by the entire organization's support, enablement, and capabilities. As a part of the AIA, you will offer various CTI analytical deliverables like alert-driven threat reports, threat data analysis, briefings, and support to SOC/Blue team functions. AIA Integrators aim to be tightly integrated with their client, working onsite a number of days per week.

Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.

Responsibilities

• Understand customers Cyber Threat Intelligence (CTI) requirements, identifying their needs and opportunities for deployment of CTI within their operations to have the greatest defensive impact.
• Evaluate tools and best practices for tracking advanced threats, Tools, Techniques, and Procedures (TTPs) of attacker’s motivations, and industry and attacker trends.
• Perform analysis of customer data, taking their bespoke sources to identify threat activity, or to build and automate investigative workflows.
  
• Write intelligence reporting against customer requirements, appropriate for their intelligence analysts or executive leaders.
  
• Support the integration of CTI into customer's security processes and technologies, including Security Information and Event Management (SIEM) and Threat Intelligence Platform (TIP) systems.
  

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 5 years of experience working in a government or military environment, leveraging and developing Cyber Threat Intelligence (CTI) for network, host and log analysis, to enable the detection and response to cyber threats.
• Experience in leveraging CTI to describe, track and develop new intelligence on advanced persistent threats.
• Experience in conducting or supporting incident response and investigations within enterprise environments.

Preferred qualifications:

• Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.
• Understanding of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.