threat intelligence analyst

Cintel Inc

<div>Job Title: Cyber Threat Intelligence Analyst

Location: Redstone Arsenal

Position Type: Full-Time 
Position Overview

We are seeking a Senior Cyber Threat Intelligence (CTI) Analyst to support mission-critical cybersecurity and intelligence operations. The ideal candidate will have a strong intelligence analysis background with experience identifying, analyzing, and reporting on cyber threats, adversary tactics, techniques, and procedures (TTPs), and emerging threat trends affecting government and defense systems. 
Responsibilities
<ul>
<li>Conduct cyber threat intelligence analysis to identify and assess current and emerging cyber threats.</li>
<li>Research, analyze, and correlate intelligence from multiple sources to develop actionable threat reporting.</li>
<li>Monitor threat actor activity, adversary TTPs, and indicators of compromise (IOCs).</li>
<li>Utilize Splunk Enterprise Security and Microsoft Sentinel to investigate security events and support threat hunting activities.</li>
<li>Produce intelligence products, briefings, and reports for technical and non-technical stakeholders.</li>
<li>Collaborate with cybersecurity, incident response, and operational teams to enhance organizational threat awareness.</li>
<li>Support strategic, operational, and tactical intelligence efforts in a classified environment.</li></ul> 


Required Qualifications
<ul>
<li>Active Top Secret (TS) Clearance.</li>
<li>Bachelor's degree in Cybersecurity, Intelligence Studies, Information Technology, Computer Science, or a related field.</li>
<li>8+ years of experience in cyber threat intelligence, intelligence analysis, cybersecurity operations, or related fields.</li>
<li>Experience with Splunk Enterprise Security and Microsoft Sentinel.</li>
<li>Strong analytical, research, and written communication skills.</li>
<li>Experience producing intelligence reports and briefings for leadership and mission stakeholders.</li></ul> 


CULTURE REQUIREMENTS: 

<ul>
<li>Engineers, Analysts, and Developers at Cintel, Inc. are highly motivated, technical, and self‐organized. We place a lot of trust in our team members to develop technical solutions for ill‐defined problems (i.e. thrive in an environment where the problem is vague, requirements are lacking, and a solution is not obvious). We need problem solvers.</li>
<li>We want our team members to be self‐motivated and eager to learn new skills. If you consider yourself a jack‐of‐all‐trades, and are eager to keep up with the latest trends in technology, you&rsquo;ll fit right in.</li></ul> 


ABOUT CINTEL, INC:

Cintel Inc. is a Small Business providing strategies and services to support an array of Government clients in Software Development, Operational/Tactical and Installation/Facilities Energy, Cyber Security, Modeling and Simulation, Data Science, and Programmatic support. 


We offer our clients nimble, unique, and value focused solutions with an emphasis on people, connectivity, communication, and teamwork. Our team believes that people drive solutions. By connecting people, information, teams, and experience we deliver solutions that respond to customer needs. 


It is the policy of Cintel that all persons are entitled to equal employment opportunity regardless of their race, color, religion, sex (including gender identity, sexual orientation, and pregnancy), national origin, age (40 or older), disability, genetic information, or veteran status. These policies shall ensure that the practice of nondiscrimination will be applied in the employment, promotion, upgrading, demotion, transfer, layoff, termination, recall or rehire of personnel. Equal employment opportunity applies to all terms and conditions of employment, including hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation, and training. 


Cintel, Inc. expressly prohibits any form of unlawful employee harassment or discrimination based on any of the characteristics mentioned above. Improper interference with the ability of other employees to perform their expected job duties is not tolerated.</div>

Cyber Threat Intelligence Analyst

Mercor

<div>
 
 About The Job
 
 
 
 
 Mercor
 
 connects elite creative and technical talent with leading AI research labs. Headquartered in San Francisco, our investors include
 
 Benchmark
 
 ,
 
 General Catalyst
 
 ,
 
 Peter Thiel
 
 ,
 
 Adam D'Angelo
 
 ,
 
 Larry Summers
 
 , and
 
 Jack Dorsey
 
 .
 
 
 
 Position:
 
 Cybersecurity Expert
 
 
 
 Type:
 
 
 Contract
 
 
 
 
 Compensation:
 
 
 $1,750&ndash;$2,150 per completed task
 
 
 
 
 Location:
 
 
 Remote
 
 
 
 
 Role Responsibilities
 
 
 
 <ul>
 <li>
 Review and evaluate AI-generated outputs related to threat analysis, vulnerability assessment, and security architecture recommendations.
 </li>
 <li>
 Create realistic scenarios based on cybersecurity workflows such as incident response runbooks, threat hunting queries, and penetration testing reports.
 </li>
 <li>
 Annotate, label, and validate data across cybersecurity use cases like CVE classification accuracy and SIEM alert triage.
 </li>
 <li>
 Provide structured feedback on AI accuracy in areas such as cybersecurity frameworks (NIST CSF, MITRE ATT&amp;CK) and threat intelligence standards (STIX/TAXII).
 </li>
 <li>
 Collaborate asynchronously with research teams to refine evaluation frameworks for cybersecurity AI.
 
 
 
 </li>
 </ul>
 
 Qualifications
 
 
 
 
 Must-Have
 
 
 
 <ul>
 <li>
 3+ years of professional experience in cybersecurity at an enterprise organization, MSSP, consultancy, or government/defense environment.
 </li>
 <li>
 Background in areas such as SOC analysis, incident response (DFIR), penetration testing, threat intelligence, or security architecture.
 </li>
 <li>
 Strong analytical thinking and ability to translate security operations into structured evaluation tasks.
 </li>
 <li>
 Clear written communication and attention to detail.
 
 
 
 </li>
 </ul>
 
 Preferred
 
 
 
 <ul>
 <li>
 Professional certifications like CISSP, CISM, CEH, OSCP, GIAC certifications, Security+.
 
 
 
 </li>
 </ul>
 
 Compensation &amp; Legal
 
 
 
 <ul>
 <li>
 Task Completion Pay: Competitive and based on task quality.
 </li>
 <li>
 Performance Bonus: Weekly bonus incentive for top performers.
 </li>
 <li>
 Hourly Opportunity: Transition to hourly compensation for sustained quality.
 
 
 
 </li>
 </ul>
 
 Application Process (Takes 20&ndash;30 mins to complete)
 
 
 
 <ul>
 <li>
 Upload resume
 </li>
 <li>
 AI interview based on your resume
 </li>
 <li>
 Submit form
 
 
 
 </li>
 </ul>
 
 Resources &amp; Support
 
 
 
 <ul>
 <li>
 For details about the interview process and platform information, please check: https://talent.docs.mercor.com/welcome
 </li>
 <li>
 For any help or support, reach out to: support@mercor.com
 
 
 
 </li>
 </ul>
 
 PS: Our team reviews applications daily. Please complete your AI interview and application steps to be considered for this opportunity.
 
</div>

Penetration Tester | Upto $2150 Part-time

<div>Minimum qualifications:
<ul><li>Bachelor&rsquo;s in Computer Science or Information Security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence) 
<li>
</li></ul></li></ul>Key Skills
<ul><li>Collaborate with other team members and colleagues
</li><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies 
<li>
</li></ul>Key Knowledge
<ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li>Responsible information disclosure procedures 
<li>
</li></ul>Minimum experience:
<ul><li>4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering preferably with exposure in banking/fintech.</li></ul></div>
 <div>Minimum qualifications:
<ul><li>Bachelor&rsquo;s in Computer Science or Information Security or MIS
</li><li>Preferably at least one of the following professional certifications:
<ul><li>GREM (GIAC Reverse Engineering Malware)
</li>GCTI (GIAC Cyber Threat Intelligence) 
<li>
</li></ul></li></ul>Key Skills
<ul><li>Collaborate with other team members and colleagues
</li><li>Communicate, present and report to relevant stakeholders
</li><li>Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
</li><li>Decompose and analyze systems to identify weaknesses and ineffective controls
</li><li>Generate new ideas and transfer theory into practice
</li><li>Identify and solve cybersecurity-related issues
</li>Monitor new advancements in cybersecurity-related technologies 
<li>
</li></ul>Key Knowledge
<ul><li>Cybersecurity standards, methodologies and frameworks
</li><li>Cybersecurity-related research, development and innovation (RDI)
</li><li>Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
</li><li>Multidiscipline aspect of cybersecurity
</li>Responsible information disclosure procedures 
<li>
</li></ul>Minimum experience:
<ul><li>4-7 years of experience with 2&ndash;4 years in threat research/reversing/detection engineering preferably with exposure in banking/fintech.</li></ul></div>

Cyber Security Research Specialist

OpenAI

About the Team
 
The Intelligence and Investigations team seeks to rapidly identify and mitigate abuse and strategic risks to ensure a safe online ecosystem. We are dedicated to identifying emerging abuse trends, analyzing risks, and working with our internal and external partners to implement effective mitigation strategies to protect against misuse. Our efforts contribute to OpenAI's overarching goal of developing AI that benefits humanity.
 
The Strategic Intelligence & Analysis (SIA) team provides safety intelligence for OpenAI’s products by monitoring, analyzing, and forecasting real-world abuse, geopolitical risks, and strategic threats. Our work informs safety mitigations, product decisions, and partnerships, ensuring OpenAI’s tools are deployed securely and responsibly across critical sectors.
 
About the Role
 
As an Agentic Risk Analyst, you will shape OpenAI’s operating picture for current agentic risk across products and platforms. You will bring a strategic, system-level perspective to current risks, connecting individual incidents, technical findings, abuse patterns, and external developments to relevant workstreams, mitigations, owners, dependencies, and residual gaps. You will analyze how risks emerge through autonomy, multi-step task execution, tool use, memory, retrieval, connectors, computer-use capabilities, and multi-agent workflows, with a particular focus on both adversarial misuse and unintended system behavior. By synthesizing signals from investigations, evaluations, red teaming, security reviews, product launches, external research, and real-world incidents, you will maintain a current view of material risks and evolving threat patterns. Your work will help turn complex and often ambiguous signals into coordinated decisions and measurable follow-through across product, safety, security, policy, and governance teams.
 
You will work closely with investigators, engineers, product, policy, safety, and security teams, and measurement and forecasting experts who lead longer-horizon risk discovery and scenario work to maintain a shared operating picture of current risks, mitigation priorities, owners, and dependencies. This is an opportunity to help shape how OpenAI coordinates decisions and follow-through across the evolving risk landscape of increasingly capable agentic systems, ensuring that safety decisions keep pace with rapidly advancing technology.
 
In this role, you will: 
Build and maintain a current, company-wide portfolio of material agentic risks across OpenAI’s products, platforms, and emerging capabilities, mapping each risk to relevant workstreams, owners, mitigations, dependencies, decisions, and residual gaps.
 
Run a cross-functional intake and review cadence for signals from across OpenAI and the broader ecosystem to identify emerging risks, evolving threat patterns, and important shifts in the agentic risk landscape, routing findings to the right owners and decision-makers
 
Connect individual incidents, technical findings, evaluations, and weak signals to broader system-level trends, producing clear assessments of impact, severity, evidence, uncertainty, priority, and recommended action.
 
Assess how emerging capabilities, product changes, ecosystem developments, and adversary adaptation may affect current risk priorities and launch readiness, surfacing risks that are unowned, stalled, or under-mitigated for decision and escalation, and tracking residual risk after launch.
 
In partnership with colleagues who lead horizon scanning, use relevant external developments across AI safety and security research, public incidents, adversarial activity, industry standards, emerging technologies, and competitor products, as inputs to current risk prioritization and mitigation decisions at OpenAI.
 
Apply and refine practical frameworks and taxonomies for current agentic failure modes, control gaps, abuse patterns, and potential downstream harms across products, deployment environments, and user workflows, integrating them into the broader risk program.
 
Produce concise, decision-ready assessments that communicate key findings, assumptions, confidence levels, competing hypotheses, and prioritized recommendations for product, safety, security, policy, and leadership stakeholders, with accountable owners and next review points.
 
Define and track operating metrics for the agentic-risk program, including coverage, ownership, decision latency, mitigation status, and closure and partner with measurement experts on risk indicators and monitoring capabilities.
 
Partner with colleagues who lead evaluations, scenario analyses, tabletop exercises, red-team campaigns, and investigations focused on agentic systems, using their findings to drive actionable mitigations, accountable ownership, and measurable follow-through.
 
You might thrive in this role if you
 
Have significant experience—typically 7+ years—in trust and safety, integrity, security, cyber threat intelligence, AI safety, product risk, strategic intelligence, abuse investigations, or a related field.
 
Have a strong understanding of modern AI systems and agentic architectures, including hands-on experience using, evaluating, or building agentic systems. You are familiar with AI safety concepts, agentic failure modes, and misalignment risks, and can reason about how agent objectives, incentives, environments, and system design choices may produce unintended or harmful outcomes.
 
Have demonstrated experience analyzing how harmful outcomes emerge from interactions between users, products, and technical systems, and can assess how increasingly capable agentic systems may amplify, automate, or transform existing abuse vectors such as fraud, scams, social engineering, coordinated influence operations, cyber abuse, or other forms of platform misuse. You have also helped operate a cross-functional risk, safety, security, or integrity program, clarifying ownership, resolving dependencies, escalating gaps, and driving follow-through without direct authority.
 
Have exceptional analytical judgment and experience producing assessments under uncertainty. You can identify weak signals, develop and test hypotheses, distinguish signal from noise, communicate assumptions and confidence levels clearly, and update your conclusions as new evidence becomes available.
 
Possess strong technical fluency and are comfortable engaging deeply with engineers, researchers, and security practitioners. You do not need to be an engineer, but you should be able to translate technical findings into clear risk assessments.
 
Are comfortable synthesizing data and evidence from multiple sources to manage a current risk portfolio, including investigations, telemetry, evaluations, experiments, dashboards, and external research. Experience using SQL, Python, and analytical tools is a plus.
 
Have experience applying risk frameworks, threat models, severity assessments, taxonomies, or prioritization frameworks to structure current operational ambiguity and support decision-making.
 
Communicate complex topics clearly and effectively, producing concise, executive-ready analysis and influencing stakeholders across technical and non-technical teams.
 
Thrive in fast-moving environments, balancing rigor with pragmatism while building lightweight operating processes and tools that improve organizational coordination and follow-through on material risks.
 
About OpenAI
 
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core, and to achieve our mission, we must encompass and value the many different perspectives, voices, and experiences that form the full spectrum of humanity.
 
We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic.
 
For additional information, please see
 
OpenAI’s Affirmative Action and Equal Employment Opportunity Policy Statement
 
.
 
Background checks for applicants will be administered in accordance with applicable law, and qualified applicants with arrest or conviction records will be considered for employment consistent with those laws, including the San Francisco Fair Chance Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, for US-based candidates. For unincorporated Los Angeles County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: protect computer hardware entrusted to you from theft, loss or damage; return all computer hardware in your possession (including the data contained therein) upon termination of employment or end of assignment; and maintain the confidentiality of proprietary, confidential, and non-public information. In addition, job duties require access to secure and protected information technology systems and related data security obligations.
 
To notify OpenAI that you believe this job posting is non-compliant, please submit a report through
 
this form
 
. No response will be provided to inquiries unrelated to job posting compliance.
 
We are committed to providing reasonable accommodations to applicants with disabilities.
 
OpenAI Global Applicant Privacy Policy
 
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
 
Compensation
 
$288K – $425K + Offers Equity

Agentic Risk Analyst

geidea

<div>
 
 Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovation
 
 
 Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative &amp; Forward Thinkiking
 
 
 To maintain competitive advantage as we grow, we are currently looking for a new "
 
 Cybersecurity Defense Expert"
 
 
 
 
 
 
 
 Job purpose:
 
 
 
 The purpose of this role is to lead the defense against cyber threats through proactive SOC Monitoring, DFIR, Threat Intelligence, and Vulnerability Management, ensuring the integrity, confidentiality, and availability of information systems in all regions.
 
 
 
 
 
 
 Key accountabilities and decision ownership:
 
 
 <ul>
 <li>
 Lead and enhance SOC operations, focusing on real-time threat detection, incident response, and continuous monitoring.
 </li>
 <li>
 Coordinate digital forensics and incident response efforts to mitigate threats efficiently and reduce recovery time.
 </li>
 <li>
 Develop and implement a threat intelligence program to identify and counteract evolving cyber threat
 </li>
 <li>
 Manage the Vulnerability Management Program, including regular assessments, risk prioritization, and remediation strategies.
 </li>
 <li>
 Support the cybersecurity vision and strategy in alignment with defense operations and organizational goals.
 </li>
 <li>
 Oversee information security audits, whether by performed by organization or third-party personnel.
 </li>
 <li>
 Lead integration of standard and non-standard logs in SIEM.
 </li>
 <li>
 Create reports, dashboards, metrics for SOC operations and presentation to Senior Management.
 </li>
 <li>
 Lead team &amp; vendor management overall use of resources and initiation of corrective action where required for Security Operations Center.
 </li>
 <li>
 Develop and maintain enterprise Threat &amp; Vulnerability Management framework and necessary program operational capabilities that include identify, risk assess, and monitor of vulnerability and associated remediation.
 </li>
 <li>
 Maintain control effectiveness and continuously identify gaps in detection controls across the environment, including Geidea&rsquo;s cloud environments.
 </li>
 <li>
 Serve as the process owner of all ongoing activities related to the confidentiality, integrity and availability of information and resources of customers, business partners, employees, and business information, in compliance with the organization's Cyber and Information security policies.
 </li>
 <li>
 Evaluate team performance and build on people capabilities.
 </li>
 </ul>
 
 
 
 
 
 Must have technical / professional qualifications:
 
 
 <ul>
 <li>
 2-3 years of experience
 </li>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Technology, Telecommunications, Electronics &amp; Electrical or any related field.
 </li>
 <li>
 Certifications:
 </li>
 <li>
 GCIH
 </li>
 <li>
 GCFA
 </li>
 <li>
 Experience in cybersecurity architecture design.
 </li>
 <li>
 Experience in NESA IAR, SAMA CSF, PCI-DSS, NCA is a must.
 </li>
 </ul>
 
 
 
 
 Our values guide how we think and act - They describe what we care about the most.
 
 
 
 Customer first
 
 - It&rsquo;s embedded in our design thinking and customer service approach.
 
 
 
 Open
 
 - Openness allows us to constantly improve and evolve.
 
 
 
 Real
 
 - No jargon and no excuses!
 
 
 
 Bold
 
 - Constantly challenging ourselves and our way of thinking.
 
 
 
 Resilient
 
 &ndash; If we fail, we bounce back stronger than before.
 
 
 
 Collaborative
 
 - We know that we can achieve a lot more as a team.
 
 
 We are changing lives by constantly striving for a better solution.
 
 
 Click apply below and become part of the Geidea story
 
</div>

Cybersecurity Defense Expert

Deloitte

<div>
 
 Cyber Security I Incident Response Tech Lead
 
 
 ,
 
 
 Cairo. Egypt
 
 
 
 
 Connect to your career at Deloitte
 
 
 
 
 Deloitte
 
 
 ,
 
 established globally in 1845, is the world&rsquo;s largest and leading professional services firm, providing Audit &amp; Assurance, Tax &amp; Legal and Consulting and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.
 
 
 Deloitte innovation hub (DIH) is a strategic initiative/priority established by Deloitte North &amp; South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients&rsquo; most complex business problems, across Portfolios that include &lsquo;Strategy &amp; Transactions&rsquo;, &lsquo;Customer&rsquo;, &lsquo;Engineering, AI &amp; Data, &lsquo;Enterprise, Technology &amp; Performance&rsquo; and &lsquo;Cyber&rsquo;. DIH is aiming to become the destination for top talents in Egypt for a long, exciting career.
 
 
 We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.
 
 
 
 Connect to your opportunity.
 
 
 
 
 Responsibilities
 
 
 
 As a
 
 Digital Forensics Incident Response Tech Lead
 
 , you will be assisting clients with response to Cyber Incidents and getting back to business. This includes data leaks, ransomware, and unusual network traffic caused by cyber criminals, ranging from insider threats to nation-state sponsored hackers. Your role would also include the following responsibilities:
 
 
 <ul>
 <li>
 Execute technical investigations of cyber incidents: analysis of log files, Windows event logs (Windows artifacts), Linux artifacts to correlations in EDR tooling, network monitoring tools and SIEM. Example toolsets typically used include Splunk, Microsoft Security Suite, and CrowdStrike Falcon. It is most important to apply knowledge about (Windows) forensic artifacts on any platform encountered at clients.
 </li>
 <li>
 Conduct in-depth analysis of malware, threat intelligence, and other relevant sources.
 </li>
 <li>
 Provide tactical support such as advice on triage, containment, eradication, and broader coordination in cyber incidents.
 </li>
 <li>
 Perform forensic analysis of systems and networks.
 </li>
 <li>
 Conduct memory forensics.
 </li>
 <li>
 Perform compromise assessments and threat hunting projects using SIEM and EDR tooling.
 </li>
 <li>
 Create custom scripts (using Python) for parsing special log files, data sets, images, etc.
 </li>
 <li>
 Develop complex timelines based on findings and observations.
 </li>
 <li>
 Act as a member of the broader Deloitte Response Team, contributing CIR skills to the overall team that includes privacy, crisis management, crisis communication, forensic investigations, and ICS/OT.
 </li>
 <li>
 Participate in the EMEA and Global technical incident responder community to build a strong network and share knowledge.
 </li>
 <li>
 Work flexible hours to support customers during high-impact incidents.
 
 
 </li>
 </ul>
 
 Connect To Your Skills And Professional Experience
 
 
 
 To succeed in this role, you need to have the following:
 
 
 <ul>
 <li>
 Master&rsquo;s or bachelor&rsquo;s degree in computer science (or related field).
 </li>
 <li>
 One or more Forensics Certifications such as GCIH, GCFE, GCFA, GNFA, GREM.
 </li>
 <li>
 At least 3 years of experience in Cyber Incident Response and digital forensics.
 </li>
 <li>
 Minimum 7 years of experience in Cyber Security domain
 </li>
 <li>
 Hands-on skills to perform sharp and in-depth analyzes, both using tooling such as EDR and network sensors, but also manual analysis, if the tools are not available.
 </li>
 <li>
 Affinity with offensive security work (pentesting etc.) is beneficial.
 </li>
 <li>
 Posses strong passion for ransomware intelligence and work well in challenging situations, you can see both the bigger picture, as well as the smallest traces
 </li>
 <li>
 Experience in systems and/or network administration is a highly advantageous.
 </li>
 <li>
 Ability to work under pressure and keep track of the big picture while performing in-depth analysis.
 </li>
 <li>
 Trust and Confidentiality in handling client sensitive information.
 </li>
 <li>
 Ability to prioritize and take ownership, even when in unchartered territory.
 
 
 </li>
 </ul>
 
 The Following Attributes Are Essential
 
 
 
 <ul>
 <li>
 Strong written, verbal and presentation skills.
 </li>
 <li>
 A willingness to work as part of a diverse team.
 </li>
 <li>
 A commitment to continuous improvement and lifelong learning.
 </li>
 <li>
 A passion for technology and a drive to deliver secure, high-quality solutions.
 </li>
 <li>
 Strong analytical and problem-solving skills.
 </li>
 <li>
 Excellent communication and interpersonal abilities.
 </li>
 <li>
 Ability to work effectively in a fast-paced and dynamic environment.
 </li>
 <li>
 Proactive and self-motivated with a keen attention to detail.
 
 
 </li>
 </ul>
 
 Connect to your service line &ndash; Technology and Transformation
 
 
 
 Distinctive thinking, deep expertise, and collaborative working. That&rsquo;s what connects us. That&rsquo;s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we&rsquo;ll make an impact that matters.
 
 
 
 Personal independence
 
 
 
 Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.
 
 
 
 Connect to your Industry
 
 
 
 &ldquo;What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte&rsquo;s clients include many of the world&rsquo;s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.&rdquo; Dan, T&amp;T.
 
 
 
 Connect with your colleagues
 
 
 
 Location: Cairo. Egypt
 
 
 Your Work, Your Way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You&rsquo;ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.
 
 
 
 Our commitment to you
 
 
 
 Making an impact is more than just what we do: it&rsquo;s why we&rsquo;re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.
 
 
 We want you. The true you. Your own strengths, perspective, and personality. So, we&rsquo;re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we&rsquo;ll take your wellbeing seriously, too. Because it&rsquo;s only when you&rsquo;re comfortable and at your best that you can make the kind of impact you, and we, live for.
 
 
 Your expertise is our capability, so we&rsquo;ll make sure it never stops growing. Whether it&rsquo;s from the complex work you do, or the people you collaborate with, you&rsquo;ll learn every day. Through world-class development, you&rsquo;ll gain invaluable technical and personal skills. Whatever your level, you&rsquo;ll learn how to lead.
 
 
 
 Connect to your next step
 
 
 
 A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you&rsquo;ll experience a purpose you can believe in and an impact you can see. You&rsquo;ll be free to bring your true self to work every day. And you&rsquo;ll never stop growing, whatever your level.
 
 
</div>

Deloitte Innovation Hub I Cyber Security I Digital Forensics Incident Response Tech Lead, Cairo, Egypt.

Apple

As part of Global Security, Apple's Crisis Management team plays a critical role in safeguarding our people, operations, and reputation around the world. Working closely with partners across the business, the team leads crisis preparedness, incident response, resilience planning, and strategic decision-making during significant events. By identifying and managing emerging risks, the team strengthens organizational resilience and helps ensure Apple is prepared to respond effectively to an ever-evolving global threat landscape. 
 
The Crisis Management Intelligence &amp; Technology Manager is responsible for driving the intersection of intelligence operations and technology evolution. 
 
Description 
 
The role focuses on monitoring global risks to Apple&rsquo;s assets from natural disasters and human-generated threats, delivering intelligence products, threat monitoring, and decision-support capabilities across a complex global environment. This role is NOT related to cyber or network threats or risks. 
 
In addition, this position is responsible for directly implementing technology amplifiers and solutions for the entire team. The role will lead high-performing intelligence, technology, and project teams, working closely with regional crisis managers, technical teams, and cross-functional stakeholders to ensure scalable, resilient, and intelligence-led, technology-agile crisis management operations.&quot;,&quot;responsibilities&quot;:&quot;Lead global Crisis Management Intelligence &amp; Services operations globally. 
 
Oversee regional vendor analyst teams across APAC, AMR, and EMEIA, ensuring consistency in intelligence collection, escalation, monitoring, and reporting. 
 
Manage and develop high-performing intelligence, technology, and project teams. 
 
Lead crisis management technology and innovation programmes, including platform development, analytics, automation, and monitoring capabilities. 
 
Develop, maintain, and manage strategic relationships with intelligence, technology, and crisis management vendors to enhance global capability, resilience, and response effectiveness. 
 
Ensure vendor performance, service delivery, and capabilities alignment and strategic objectives. 
 
Drive continuous improvement of crisis detection, intelligence workflows and products, operational procedures, and analytical standards. 
 
Partner with technical teams and cross-functional stakeholders to identify capability gaps and deliver scalable solutions. 
 
Oversee production of actionable intelligence, threat monitoring, situational awareness reporting, and crisis intelligence products. 
 
Ensure intelligence outputs support crisis response, executive decision-making, and operational planning. 
 
Lead intelligence support during crisis events, including coordination and executive reporting. 
 
Maintain operating models, playbooks, and escalation frameworks in partnership with regional crisis managers. 
 
Develop and lead crisis readiness programmes, including training, drills, simulations, tabletop exercises, and after-action reviews. 
 
Assess operational readiness and drive continuous improvement across crisis preparedness capabilities. 
 
Provide clear and high-impact executive briefings during both steady-state and crisis scenarios. 
 
Oversee crisis management technology ecosystems, including automation, analytics, workflow platforms, monitoring tools, and collaboration systems. 
 
Build strong partnerships across Global Security and cross-functional teams to ensure alignment and coordination. 
 
Preferred Qualifications 
 
Experience leading global intelligence or crisis management functions in multinational environments. 
 
Knowledge of geopolitical, physical security, and operational risk intelligence disciplines. 
 
Experience managing vendor-supported intelligence operations or outsourced analytical teams. 
 
Familiarity with automation, analytics, AI-enabled workflows, and crisis management platforms. 
 
Experience leading technology transformation or platform modernisation programmes. 
 
Experience implementing or scaling enterprise crisis management systems and tools. 
 
Experience designing global crisis readiness, training, and exercise programmes across multiple regions and functions. 
 
Minimum Qualifications 
 
15+ years of experience in intelligence, security operations, crisis management, resilience, or related fields. 
 
5+ years of proven experience leading intelligence, operational, technology, or project teams in complex global environments. 
 
Strong understanding of crisis management, intelligence operations, threat monitoring, and operational readiness frameworks. 
 
Experience delivering intelligence support in crisis or high-tempo operational environments. 
 
Demonstrated experience leading transformation, innovation, or technology programmes. 
 
Experience managing intelligence, monitoring, analytics, or crisis management platforms and tools. 
 
Experience designing and delivering training, drills, exercises, and readiness programmes. 
 
Strong stakeholder management skills, including engagement with senior leadership, technical teams, and external vendors. 
 
Experience managing vendor relationships and outsourced capability providers. 
 
Excellent communication skills, including executive-level briefing and reporting. 
 
Ability to operate in fast-paced, high-pressure environments. 
 
BA/BS degree or equivalent professional experience.

Crisis Management Intelligence & Technology Manager

Search 1817+ Threat intelligence analyst jobs near you this June. New roles added regularly across leading industries. Apply today.