Cyber Threat Intelligence (CTI) Analyst

Stack

Responsibilities

• ▹Analyze threat actor activity, campaigns, malware families
• ▹Produce intelligence reports for SOC, IR, leadership
• ▹Threat landscape and sector-specific risk assessments
• ▹Extract and correlate IOCs (domains, IPs, hashes)
• ▹Map adversary techniques to MITRE ATT&CK
• ▹Analyze malware behavior and sandbox reports
• ▹Support detection rule development (Sigma, YARA, Splunk)
• ▹Work with STIX/TAXII feeds and TI platforms
• ▹Support automation of ingestion, normalization, correlation pipelines
• ▹Support SOC/IR during active investigations
• ▹Contribute to purple-team exercises
• ▹Present findings to technical and executive stakeholders

Requirements

• ▹Strong understanding of adversary TTPs, Kill Chain, MITRE ATT&CK
• ▹IOC lifecycle and enrichment techniques
• ▹Experience with TI platforms, malware analysis reports
• ▹Log analysis (Splunk, ELK)
• ▹OSINT collection techniques
• ▹Knowledge of STIX/TAXII, YARA/Sigma rule creation
• ▹Network protocols and traffic analysis
• ▹Windows and Linux security telemetry
• ▹Python scripting capability

Nice to have

• ▹Tracking specific threat actors (APT28, Lazarus, FIN7)
• ▹Familiarity with exploit dev trends, CVE weaponization
• ▹Experience with honeypots and telemetry-driven intelligence
• ▹Understanding of ransomware ecosystems
• ▹Knowledge of ML-assisted threat detection
• ▹GIAC (GCTI, GCIA, GCED), OSCP/OSCE, CISSP, SANS CTI certifications

Soft skills

What we offer

• ▹Highly competitive, regularly reviewed salary
• ▹Work from home
• ▹Participation in large-scale projects
• ▹Continuous professional development

About the company

AI2CYBER is a cybersecurity firm providing cutting-edge solutions to protect clients from evolving cyber threats.