Sr.Cyber Threat Intelligence Analyst- Saudi National

Sr. Cyber Threat Intelligence Analyst -- Saudi National

Company Description

IT Security C&T is an innovative, fast-growing security consulting and training company. Our management team combined with our consultants and engineers work together to deliver comprehensive security solutions to our customers around the MENA region. IT Security C&T is continuously expanding its team of qualified professionals for a wide range of opportunities. Interested candidates are required to apply via our Career webpage on our website (www.itsecurityct.com).

Job Description

Job Purpose:

The Cyber Threat Intelligence Analyst is responsible for collecting and analyzing multi-source information about cybersecurity threats to develop a deep understanding and awareness of cyber threats and actors’ Tactics, Techniques, and Procedures (TTPs). The analyst derives and reports indicators that help organizations detect and predict cyber incidents and protect systems and networks from cyber threats.

Key Accountabilities:

1. Maintain a solid understanding of control frameworks including but not limited to CIS 20 Critical Controls, PCI DSS, ISO, CSF, CTI, and COBIT.
2. Use knowledge of threat actors and activities to build a common understanding of the organization's current risk profile.
3. Inform the organization's response to a cyber incident using knowledge of threat actors and activities.
4. Coordinate, validate, and manage the organization's cyber threat intelligence sources and feeds.
5. Identify information gaps in threat intelligence and assess their implications for the organization.
6. Prepare and deliver briefs on specific threats to the organization.
7. Work collaboratively and share information with threat intelligence analysts in related fields.
8. Evaluate threat decision-making processes.
9. Identify the principal threats to the organization's known vulnerabilities.
10. Monitor and report changes in threat dispositions, activities, tactics, capabilities, and objectives.
11. Monitor and report on validated threat activities.
12. Monitor open-source websites for hostile content directed towards organizational or partner interests.
13. Monitor and report on threat actor activities to fulfill the organization's threat intelligence and reporting requirements.
14. Support the planning and development of the organization's cybersecurity strategy and resources using expertise on threat actors and activities.
15. Provide information and assessments of threat actors to assist stakeholders in planning and executing cybersecurity activities.
16. Provide real-time cyber threat intelligence analysis and support during cybersecurity incidents and exercises.
17. Monitor cyber threat intelligence feeds and report significant network events and intrusions.
18. Maintain a common intelligence picture.
19. Conduct in-depth research analysis and identify cyber threat tactics and methodologies.
20. Provide current intelligence support to critical internal/external stakeholders as appropriate.
21. Provide evaluation and feedback necessary for improving intelligence production, reporting, collection requirements, and operations.
22. Provide timely notice of imminent or hostile intentions or activities which may impact organizational objectives, resources, or capabilities.
23. Work closely with planners, intelligence analysts, and collection managers to ensure intelligence requirements and collection plans are accurate and up-to-date.
24. Assist in the incident response process and forensic investigations.
25. Review, conduct, or participate in audits of cyber programs and projects.
26. Assist the team in developing use cases based on Indicators of Compromise (IOCs).
27. Assist the team in analyzing various information feeds, systems information, and threat intelligence to ensure we can respond to threats, wherever they come from.
28. Develop Cyber Threat Policies, Procedures, and Processes.
29. Other tasks assigned by Information Security Management.

Qualifications

Bachelor’s degree in IT, Engineering, or a related field of study preferred; 3-5 years of progressive experience in a Cyber Threat Intelligence Analyst/technical security role; certifications such as CISSP, CISM, CISA, GIAC, Security+, Certified Threat Intelligence Analyst are preferred.

Additional Information

Job Location: Sr. Cyber Threat Intelligence Analyst -- Saudi National
King Fahd Road, Al Khobar, Saudi Arabia * Full-time