cyber intelligence analyst

Group-IB

<div>
 <p>
  <strong>
   ABOUT GROUP-IB:
  </strong>
 </p>
 <p>
  Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company&rsquo;s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Group-IB&rsquo;s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats.
  </strong>
  These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Each of us can help make the world a safer place. Join us!
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   ABOUT THE ROLE:
  </strong>
 </p>
 <p>
  The selected candidate will be responsible for
  <strong>
   generating comprehensive cyber threat reports
  </strong>
  for both internal stakeholders and clients/partners. The reports will primarily cover
  <strong>
   Advanced Persistent Threat (APT) activities, intrusion tactics, techniques and procedures (TTP), as well as targeted entities.
  </strong>
  The role will involve leveraging internal and external resources to
  <strong>
   investigate threats and vulnerabilities,
  </strong>
  while also analyzing different threat actors and their attack infrastructure.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   YOUR MISSION
  </strong>
 </p>
 <ul>
  <li>
   Analyzing IOCs and TTPs of the Threat Actors from the META Threat Landscape;
  </li>
  <li>
   Craft, maintain, and document detection opportunities within the Threat Intelligence platform;
  </li>
  <li>
   Perform necessary correlation and research to create useful, compelling, and context-rich alerts for customers;
  </li>
  <li>
   Pursue research into current threats and industry trends to be aware of the most up-to-date threats in the META Threat Landscape;
  </li>
  <li>
   Drive initiatives to create detection content based on findings stemming from threat hunts and ad hoc detection opportunities;
  </li>
  <li>
   Develop mitigation and countermeasure strategies from collected threat intelligence;
  </li>
  <li>
   Leveraging MITRE ATT&amp;CK categorization to align observed threat actor activity to Tactics, Techniques, and Procedures (TTPs).
  </li>
  <li>
   Create professional reports on a specific threat or the threat landscape in general.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   WHAT SUCCESS LOOKS LIKE:
  </strong>
 </p>
 <ul>
  <li>
   Understanding and interest in the threat landscape in the META region.
  </li>
  <li>
   Experience in analyzing the cybercrime community and profiling the threat actors.
  </li>
  <li>
   Basic knowledge of scripting language (Python, Bash).
  </li>
  <li>
   Knowledge of network technologies and principles of functioning of data networks, understanding of the features of the common data transfer protocols.
  </li>
  <li>
   Knowledge of OS architecture and operating principles.
  </li>
  <li>
   Good interpersonal skills, as well as the ability to communicate effectively orally and in writing.
  </li>
  <li>
   Experience in working with the next sources: Virustotal, Urlscan, Shodan, RiskIQ, Public sandboxes
  </li>
  <li>
   Optionally: Group-IB or other Threat Intelligence platforms
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   OUR WORK ENVIRONMENT &amp; CULTURE:
  </strong>
 </p>
 <p>
  At Group-IB, we believe that employee happiness is fundamental to success.
 </p>
 <p>
  We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow.
 </p>
 <p>
  Whether you&rsquo;re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development.
 </p>
 <p>
  Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges.
 </p>
 <p>
  You&rsquo;ll be working with cutting-edge technologies recognized globally by Gartner, IDC, and Forrester, and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients.
 </p>
 <p>
  We take pride in our multicultural, values-driven culture&mdash;where mutual respect, collaboration, and shared goals unite us across borders. And with Group-IB&rsquo;s continued global growth and financial stability, your career trajectory here can accelerate faster than in most traditional environments.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   WHAT DO WE OFFER
  </strong>
  :
 </p>
 <ul>
  <li>
   Flexible Work Schedule
  </li>
  <li>
   We don&rsquo;t believe in fixed hours&mdash;what matters is impact, not time spent. You have the freedom to design your own workday in a way that drives results and balance.
  </li>
  <li>
   Comprehensive Health Coverage
  </li>
  <li>
   Your well-being comes first. We offer health insurance to support you when it matters most.
  </li>
  <li>
   Certifications &amp; Continuous Learning
  </li>
  <li>
   Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development&mdash;because your growth fuels our innovation.
  </li>
  <li>
   Meaningful Challenges &amp; Growth Paths
  </li>
  <li>
   From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set&mdash;and earn recognition and rewards along the way.
  </li>
  <li>
   Entrepreneurial spirit is encouraged
  </li>
  <li>
   We value initiative. Whether it&rsquo;s launching a tech blog, organizing events, building communities, or starting a sports team&mdash;Group-IB is a place where bold ideas are supported and celebrated.
  </li>
 </ul>
</div>


Cyber Intelligence Analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

T. Rowe Price

<div><div><div>At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.</div></div><div></div><div><div>
We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You&rsquo;ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you&rsquo;ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.</div></div><div></div><div><div>
Join us for the opportunity to grow and make a difference in ways that matter to you.</div></div><div></div><div>
Role Summary<br>
The Senior Cyber Threat Analyst &ndash; Threat Intelligence is responsible for collecting, curating, classifying, reporting, and analyzing cyber threat intelligence to support internal security operations, IT teams, enterprise risk management, and executive leadership.</div><div>
This role involves active collaboration with external partners and cyber intelligence sharing groups to both disseminate and gather intelligence on relevant cyber threats.</div><div>
The analyst will leverage intelligence data to help internal teams proactively identify, assess, and communicate potential threat actor activities that could impact the firm&rsquo;s interests.</div><div></div><div>
Responsibilities</div><ul><li>
Continuously monitor and investigate cyber-enabled threats to the firm, including activity from financially motivated and nation-state-aligned threat actors.</li><li>
Collaborate with legal, HR, insider threat, cybersecurity operations, and fraud teams by providing timely intelligence and support.</li><li>
Track and analyze threat actor tactics, techniques, and procedures (TTPs) targeting the financial services sector.</li><li>
Produce intelligence reports on adversarial attempts to compromise personnel, vendors, or information systems.</li><li>
Maintain awareness of adversarial use of contractors, front companies, and proxy personnel (e.g., DPRK or Iranian IT workers) and assist with due diligence and third-party risk assessments.</li><li>
Develop and maintain intelligence requirements, collection plans, and risk assessments aligned with the Cyber Threat Intelligence (CTI) team&rsquo;s objectives.</li></ul><div></div><div>
Business Knowledge</div><ul><li>
Able to articulate cybersecurity risks and translate them into actionable solutions for technology teams.</li><li>
Deep understanding of the goals and objectives of a cyber analysis program.</li></ul><div></div><div>
Qualifications</div><div>
Required:</div><ul><li>
5+ years of experience in cyber threat intelligence, incident response, or related cybersecurity fields.</li><li>
Experience with APT tracking, open-source intelligence (OSINT), dark web research, and threat actor attribution.</li><li>
Familiarity with nation-state adversary TTPs (e.g., PRC, Russia, Iran, DPRK) targeting financial institutions.</li><li>
Proven ability to work with cross-functional teams, including legal, compliance, HR, and IT.</li><li>
Excellent communication and analytical writing skills, with the ability to brief senior leadership clearly and effectively.</li></ul><div></div><div>
Preferred:</div><ul><li>
Experience working in a 24x7 global enterprise, ideally within the financial sector.</li><li>
Bachelor&rsquo;s degree in Cybersecurity.</li><li>
Certifications such as GCTI, GOSI, CISSP, or Security+.</li><li>
Knowledge of regulatory requirements (e.g., FFIEC, NYDFS, FINRA) related to threat intelligence and risk reporting.</li></ul><div></div><div>
FINRA Requirements</div><div>
FINRA licenses are not required and will not be supported for this role.</div><div></div><div>
Work Flexibility</div><div>
This role is eligible for hybrid work, with up to three days per week from home.</div><div></div><div>
Base Salary Ranges</div><div>
Please review the job posting for the location of this specific opportunity.</div><div></div>
$94,500.00 - $161,000.00 for the location of: Maryland, Colorado, Washington and remote workers<br>
$103,000.00 - $177,000.00 for the location of: Washington, D.C.<br>
$117,000.00 - $201,000.00 for the location of: New York, California<div></div><div>
Placement within the range provided above is based on the individual&rsquo;s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.</div><div></div><div>
Commitment to Diversity, Equity, and Inclusion</div><div>
At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all.</div><div></div><div>
Benefits</div><div><div><div>
We value your goals and needs, at work and in life. As an associate, you&rsquo;ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.</div></div><div></div><div><div><br>
Featured employee benefits to enrich your life:</div></div><div><ul><li><div>
Competitive compensation</div></li></ul></div><div><ul><li><div>
Annual bonus eligibility</div></li></ul></div><div><ul><li><div>
A generous retirement plan</div></li></ul></div><div><ul><li><div>
Hybrid work schedule</div></li></ul></div></div><div><div><ul><li><div>
Health and wellness benefits, including online therapy</div></li></ul></div><div><ul><li><div>
Paid time off for vacation, illness, medical appointments, and volunteering days</div></li></ul></div><div><ul><li><div>
Family care resources, including fertility and adoption benefits</div></li></ul></div><div></div><div><div><div><br>
Learn more about our benefits.</div></div></div></div><div></div><div>
T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.</div></div>

Senior Threat Intelligence Analyst

Mission Support and Test Services

<div><p>Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA). Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site&rsquo;s Cold War legacy. Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.
</p><ul><li>MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.
</li><li>MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.</li></ul></div>
<br><div><p>MSTS is seeking a Principal Cyber Counterintelligence (CI) Officer (CCIO) with experience in cyber investigative tools and the conduct of CI/national security investigations. The position will be in North Las Vegas, Nevada. The primary purpose of this position is to serve as a CCIO for the Department of Energy&rsquo;s (DOE) Office of Intelligence and Counterintelligence (IN) at the DOE&rsquo;s Nevada Field Office and report to the Senior CIO, Las Vegas Field Office (LVFO). This CCIO will be part of the CI team responsible for managing and implementing the CI Program, encompassing all contractors, sub-contractor and federal facilities associated with the Nevada National Security Sites (NNSS).
</p><p><b>Key Responsibilities
</b></p><ul><li>Provide in-depth analysis and response to computer related (cyber) security incidents and CI operations.
</li><li>Conduct investigations of CI, counterterrorism (CT) and insider threats relevant to the protection of DOE National Nuclear Security Administration (NNSA) facilities and U.S. national security.
</li><li>Develop and maintain professional relationships with United States Intelligence Community (IC) and law enforcement partners.
</li><li>Conduct liaison with local intelligence and local law enforcement officials.
</li><li>Interface regularly with DOE IN.
</li><li>Develop and maintain relationships with various NNSS departments including security and key technical and management officials.
</li><li>Analyze and evaluate foreign intelligence (FI) collection as it relates to CI.
</li><li>Prepare reports of investigation, case analysis, briefings, operations and foreign intelligence threats to DOE.
</li><li>Brief and debrief individuals on the CI and CT threats relevant to foreign travel, foreign visits and general foreign interactions.
</li><li>Collect relevant intelligence information, open inquiries and investigations, and resolve/exploit information as required.
</li><li>Perform other duties as assigned.</li></ul></div>
<br><div><ul><li>Bachelor&rsquo;s degree in a business-related field, or equivalent training and experience, and at least 9 years' relevant experience.
</li><li>Minimum of nine years&rsquo; experience in computer security/incident handling practices of other organizations, preferably supporting U. S. Government departments or agencies.
</li><li>Possess an understanding of Advanced Persistent Threat (APT) Tactics, Techniques and Procedures (TTPs).
</li><li>Demonstrate knowledge and experience in conducting sensitive investigations and operations involving networks, computers, and digital media.
</li><li>Demonstrate an understanding of how computer-based and Internet-based. applications can be used to facilitate national security crimes such as espionage and terrorism.
</li><li>Experience in, and familiarity with, current trends in CI and CT threats.
</li><li>Experience in developing CI initiatives, and applying CI concepts, practices, regulations, methods, and techniques.
</li><li>Demonstrated knowledge and experience with IC agencies&rsquo; mission, including an understanding of applicable laws, guidelines, directives, policies, and procedures.
</li><li>Cybersecurity certifications are preferred. Please upload copies of any current cybersecurity certifications along with your resume.
</li><li>Ability to exercise discretion and independent judgment regarding how principles and methods are selected and applied to work.
</li><li>Ability to meet the physical requirements necessary to safely and effectively perform all assigned duties.
</li><li>Ability to maintain strict confidentiality.
</li><li>Ability to communicate effectively, both verbally and in writing, to communicate with co-workers, customers, write clear and concise reports, and collect information.
</li><li>Current/active security clearance at either the TS or TS/SCI level strongly preferred.
</li><li>The primary work location will be at the DOE&rsquo;s Nevada Field Office located in the City of North Las Vegas, Nevada. Remote work is not available for this position.
</li><li>Work schedule for this position will be either 4/10s, 9/80, or 5/8s (subject to change).
</li><li>Pre-placement physical examination, which includes a drug screen, is required. MSTS maintains a substance abuse policy that includes random drug testing.
</li><li>Must possess a valid driver&rsquo;s license.
</li></ul><p>MSTS is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants offered employment with MSTS are also subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment. In addition, Applicants for employment must be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship, at least 18 years of age. Reference DOE Order 472.2 , &ldquo;Personnel Security&rdquo;. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.
</p><p><b>Department of Energy Q Clearance </b>(position will be cleared to this level). Reviews and tests for the absence of any illegal drug as defined in 10 CFR Part 707.4 , &ldquo;Workplace Substance Abuse Programs at DOE Sites,&rdquo; will be conducted. Applicants selected will be subject to a federal background investigation, required to participate in subsequent reinvestigations, and must meet the eligibility requirements for access to classified matters. Successful completion of a counterintelligence evaluation, which may include a counterintelligence-scope polygraph examination, may also be required. Reference 10 CFR Part 709 , &ldquo;Counterintelligence Evaluation Program.&rdquo;
</p><p>MSTS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, veteran status or other characteristics protected by law. MSTS is a background screening, drug-free workplace.
</p><p>Annual salary range for this position is: <b>$117,270.40 - $178,838.40.
</b></p><p>Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.</p></div>

Cyber Counterintelligence Officer (Principal Intelligence Analyst)

Senior Cyber Security Analyst (Ops - Cloud) <p>The Senior Security Analyst (Ops) sits within the Protective Monitoring function of the Cyber Security Operations Centre (CSOC). The CSOC is made up of Protective Monitoring, Incident Management, Threat Operations, Engineering and Consultancy. The role is a Tier 3 analyst in the Cloud Protective Monitoring Sub team.</p><p>Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS.</p><p>The Cyber Operations sub-directorate consists of 4 operational areas:</p><ul><li>Cyber Security Operations Unit (CSOU)</li><li>Cyber Delivery Unit (CDU).</li><li>Cyber Improvement Programme.</li><li>Chief Information Security Office Function (CISO)</li></ul><p>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.</p><p>Please be aware that RRP is none contractual and subject to review.</p> Main duties of the job <p>As a Senior Security Analyst Ops you will:</p><ul><li>Provide Tier 3 security analytics and incident response for service-specific security monitoring.</li><li>Depose for Security Lead (Analyst) in their absence.</li><li>Act as an escalation point for Tier 2 Analysts for incidents and investigations.</li><li>Offer mentorship and guidance to Tier 2 Analysts to support others and their own growth and development.</li><li>Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.</li><li>Use advanced analytic tools including SIEMs, and Cloud Consoles to determine emerging threat patterns and vulnerabilities.</li><li>Apply experience and knowledge to assist with investigations of triggered security alerts.</li><li>Support with the development and automation of SOC processes, to mature the security monitoring service.</li><li>Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.</li></ul> About us <p>The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:</p><ul><li>Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.</li><li>Making the NHS a great place to work, where our people can make a difference and achieve their potential.</li><li>Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care</li><li>Optimising the use of digital technology, research, and innovation</li></ul><p><b>Important:</b> Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check </p><p>Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.</p><p>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.</p><p>Please be aware that RRP is non-contractual and subject to review</p> Job responsibilities <p><b>Due to the nature of this role, previous experience working in an Analyst role within a Cyber Security Operations Centre is essential.</b> Essential Qualifications required</p><ul><li>SANS SEC504 (GIAC GCIH)</li><li>SANS SEC511 (GIAC GMON)</li><li>SANS SEC541 (GIAC GCTD)</li><li>SANS FOR508 (GIAC GCFA)</li><li>SANS FOR509 (GIAC GCFR)</li><li>AZ-500: Azure Security Engineer Associate</li><li>AWS Certified Security Speciality</li></ul><p><b>Residency requirements</b>: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check </p><p>Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.</p><p>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.</p><p>Please be aware that RRP is non-contractual and subject to review</p><p>Secondments</p><p>Applicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.</p><p>Please note that the reason for the fixed term of this contract is short term vacancy</p><p>You can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents.</p> Person Specification Knowledge <ul><li>Working knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives.</li><li>Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.</li><li>Proven knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks.</li><li>Working knowledge of concept, issues and techniques of cloud security; ability to ensure security compliance of cloud infrastructure in various circumstances.</li><li>Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint infrastructure in various circumstances.</li></ul> Skills and Experience <ul><li>Previous experience working in an Analyst role within a Cyber Security Operations Centre</li><li>Evidence of continuous professional development</li></ul> Qualifications <ul><li>Masters level degree or equivalent level of experience</li></ul> Disclosure and Barring Service Check <p>This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.</p><p>£66,828 to £75,218 a yearPer Annum (this includes a RRP payment of 20%)</p> Contract <p>Fixed term</p> Duration <p>11 months</p> Working pattern <p>Full-time</p> Reference number <p>990-TD-CY-17782-E</p> Job locations<img src="https://www.jobg8.com/Tracking.aspx?HuNA3DPAJ8s2luG782ZjZ8HQUF8qp6fTm" width="0" height="0" />

Senior Cyber Security Analyst (Ops - Cloud)

Google

<div>
 Note: Google's hybrid workplace includes remote and in-office roles. By applying to this position you will have an opportunity to share your preferred working location from the following:
 <br/>
 <br/>
 <strong>
  In-office locations: Kuwait City, Kuwait.
  <br/>
  <br/>
 </strong>
 <strong>
  Remote location(s): Kuwait.
 </strong>
 <strong>
  Minimum qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Bachelor's degree or equivalent practical experience.
  </li>
  <li>
   5 years of experience in an investigative role involved in the production of threat intelligence for decision-makers or customers and involved in direct customer support.
  </li>
  <li>
   Experience in an operational role involved in the research and writing of threat intelligence products for decision-makers or customers.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  Preferred qualifications:
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Experience in program management or business.
  </li>
  <li>
   Experience in using tools for analysis such as intrusion operations, enterprise security controls, log analysis, network flow and traffic analysis, incident response processes, cyber attack life-cycles and models.
  </li>
  <li>
   Experience working in a government environment and with host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network.
  </li>
  <li>
   Experience with malware/security, Google products, and working in an investigative or incident response environment.
  </li>
  <li>
   Knowledge of cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
   <br/>
   <br/>
  </li>
 </ul>
 <strong>
  About The Job
  <br/>
  <br/>
 </strong>
 As a Security Consultant, you will be responsible for helping clients effectively prepare for, proactively mitigate, and detect and respond to cyber security threats. Security Consultants have an understanding of computer science, operating system functionality and networking, cloud services, corporate network environments and how to apply this knowledge to cyber security threats.
 <br/>
 <br/>
 As a Security Consultant, you could work on engagements including assisting clients in navigating technically complex and high-profile incidents, performing forensic analysis, threat hunting, and malware triage. You may also test client networks, applications and devices by emulating the latest techniques to help them defend against threats, and will be the technical advocate for information security requirements and provide an in-depth understanding of the information security domain. You will also articulate and present complex concepts to business stakeholders, executive leadership, and technical contributors and successfully lead complex engagements alongside cross functional teams.
 <br/>
 <br/>
 Mandiant Services provides incident response, assessment, transformation, managed detection and response, and training services with direct tactical support.
 <br/>
 <br/>
 In this role, you will ensure the delivery of intelligence to each customer&rsquo;s security or operational environments in order to drive decision making and selective action. You will also act as a conduit to Mandiant&rsquo;s extensive network of cyber security, threat intelligence, and information operations professionals.
 <br/>
 <br/>
 Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. By scaling decades of frontline experience, Mandiant helps organizations to be confident in their readiness to defend against and respond to cyber threats.
 <br/>
 <br/>
 <strong>
  Responsibilities
  <br/>
  <br/>
 </strong>
 <ul>
  <li>
   Evaluate current and emerging tools, best practices, and techniques for tracking advanced continuous threats, as well as the tools, Tactics, Techniques, and Procedures (TTPs) related to attackers' motivations, industry trends, and attacker behavior.
  </li>
  <li>
   Perform tactical and operational research and analysis of adversarial cyber threats.
  </li>
  <li>
   Correlate intelligence to develop an understanding of tracked threat activity.
  </li>
  <li>
   Present tactical intelligence about threat groups, the methodologies they use, and the motivations behind their activity.
  </li>
  <li>
   Prepare and deliver briefings and reports to the client&rsquo;s executives, security team, or analysts.
   <br/>
   <br/>
   <br/>
  </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>


Senior Intelligence Analyst

NexTech Solutions LLC

<div><p>NexTech Solutions (NTS) is a team of experts and engineers who understand the challenges that organizations face in finding and implementing the best technologies and IT solutions to meet mission requirements. We work with our government customers in defense and civilian agencies to identify new technologies.</p><br>
<p></p>
<p><b>
The Opportunity</b><br>
The Intelligence Analyst will support a U.S. Government mission by researching, assessing, and exploiting Publicly Available Information (PAI) and Commercially Available Information (CAI) to evaluate data sources, vendors, and associated risks.<br>
The analyst will integrate open-source and commercial data into comprehensive intelligence assessments that support operational, strategic, and acquisition decision-making. This position requires a seasoned professional with demonstrated experience in intelligence tradecraft, data-driven analysis, and evaluation of emerging data ecosystems.</p><br>
<p></p>
<div><b>
Key Responsibilities</b></div>
<div><ul><li>Conduct detailed research and analysis of publicly available and commercially acquired data to support government intelligence and operational requirements.</li><li>
Evaluate vendors, data brokers, and information services for security, reliability, and compliance with privacy and data protection standards.</li><li>
Analyze data provenance, collection methodologies, and technical characteristics to determine potential value and risk to government missions.</li><li>
Integrate PAI/CAI findings with classified and open-source intelligence to produce actionable insights and threat assessments.</li><li>
Develop and deliver written intelligence reports, briefings, and recommendations for senior government stakeholders.</li><li>
Monitor trends in global data markets, data regulations, and information-sharing ecosystems that may affect government access or exposure.</li><li>
Collaborate with cybersecurity, legal, and acquisition teams to ensure vendor assessments align with mission and compliance requirements.</li><li>
Maintain awareness of emerging data technologies, analytic tools, and methods to enhance intelligence capabilities.</li><li>
Apply critical thinking and analytic tradecraft standards (ICD 203) to ensure the accuracy, relevance, and rigor of all analytic products.</li></ul>
</div><ul><li>Fluency in English (written and spoken)</li><li>
U.S. citizenship and ability to obtain and maintain a TS/SCI security clearance with the US Government</li></ul><br>
<p></p>
<div><b>
Education</b></div>
<div><ul><li>Bachelor&rsquo;s degree in Intelligence Studies, International Relations, Data Analytics, Computer Science, Political Science, or a related field required.</li></ul>
</div>
<div></div><div><div><b>Required Skills, Experience &amp; Abilities</b></div>
<div><ul><li>Minimum of 9 years of relevant professional experience in intelligence analysis, OSINT/PAI/CAI research, or all-source analysis supporting government or defense programs.</li><li>
Demonstrated expertise in collecting, analyzing, and interpreting open-source and commercial data.</li><li>
Experience conducting due diligence or risk assessments on vendors, data providers, or information systems.
</li><li>Strong understanding of data privacy, information security, and ethical intelligence practices.</li><li>
Proficiency with open-source research tools, databases, and analytical software (e.g., Maltego, Babel Street, DataWalk, Palantir, or similar).</li><li>
Excellent written and verbal communication skills with the ability to prepare polished intelligence reports and deliver high-level briefings.</li></ul></div><br>
<p></p>
<div><b>
Preferred Qualifications</b></div>
<div><ul><li>Experience supporting the Department of Defense (DoD), Department of Homeland Security (DHS), or Intelligence Community (IC).</li><li>
Familiarity with intelligence community analytic standards (ICD 203, 206, and 208).</li><li>
Knowledge of global data supply chains, commercial data licensing, and foreign data privacy laws (e.g., GDPR, data localization).</li><li>
Experience integrating PAI/CAI research into cyber threat, counterintelligence, or risk analysis workflows.</li></ul></div><br>
<p></p>
</div>
<div><b>Physical Demands &amp; Work Environment</b></div>
<div>The physical demands and work environment described are representative of those that an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.</div>
<div><ul><li>Prolonged periods of sitting at a desk and working on a computer.</li><li>
Ability to sit or stand for long periods of time
<div></div>
</li><li><div>Collaborative, mission-focused environment supporting national security and intelligence initiatives.</div>
<div></div>
</li><li><div>Requires critical thinking, analytical rigor, and adherence to security and ethical data handling standards.</div><br>
<p></p>
</li></ul>
</div><ul><li>Standard work schedule is Mon-Fri with core hours from 7am-5pm EST</li><li>
8 hour work day with flexibility within the core hours of operation.</li></ul><br>
<p></p>
<p><b>
Equal Opportunity</b><br>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. NTS will also consider qualified applicants with criminal histories consistent with relevant laws for employment.<br>
For individuals with disabilities that need additional assistance at any point in the application and interview process, please email recruiting@nextechsol.com.</p></div>

Intelligence Analyst

Search 6848+ Cyber intelligence analyst jobs near you this October. New roles added regularly across leading industries. Apply today.