Analyst (Cyber Threat Data Collection Group)

Job Description

• Monitoring external sources: industry reports, OSINT feeds, vendor blogs
• Collecting data on new TTPs, threats, threat groups, and campaigns from public and commercial sources
• Monitoring the dark web, forums, and Telegram recruiter contact for mentions of the organization, data leaks, and sale of access credentials
• Tracking CVEs and exploits actively used in-the-wild, assessing their applicability to the infrastructure
• Reading and structuring threat reports
• Evaluating source credibility and threat relevance to the organization's profile, prioritizing
• Preparing a concise summary of articles with key findings for non-technical stakeholders
• Entering processed data into TIP

• At least 1 year of experience in Threat Intelligence
• Practical experience with TI: analyzing vendor and CERT reports, profiling threat actors, working with IoCs. Experience in SOC, CERT, or blue team is a plus
• Understanding of MITRE ATT&CK and TI frameworks
• Proficient in mapping TTPs, working with Navigator
• Experience with Shodan, VirusTotal, Maltego, passive DNS, URLScan. Ability to read sandbox reports (Any.run, Joe Sandbox). Basic understanding of network protocols and attack vectors
• Ability to extract key information from data streams, assess threat relevance to the organization, and articulate conclusions clearly

• Social Support
  • Deferment from military service, mobilization deferment if applicable
  • Financial assistance for significant employee events
  • Supplementation of vacation pay, sick leave, and business trip allowances to 100% of salary + 10 paid days off per year
  • Voluntary medical insurance with dental coverage
  • Discounts from partner companies: sports, English language courses, psychologist services, internet, and more
• Comfortable Working Conditions
  • Competitive salary, performance-based bonuses
  • Opportunities for professional and career growth
  • An office environment conducive to work
  • Opportunity to work on cutting-edge cybersecurity products
  • A strong team of experts always ready to help and share knowledge
• Interesting Events
  • Regular open dialogues with management on important news and events
  • Expert conferences where everyone can share their case studies
  • Joint trips with colleagues across Russia
  • Online and offline sports activities (online marathons, running, yoga, volleyball, skiing, etc.)
  • Celebrating important events and holidays together