Senior Security Consultant, Threat Intelligence, Mandiant

About the job

This onsite, client-facing role supports the Advanced Intelligence Access (AIA) program. The program provides customers with access to threat intelligence, including raw data, through an onsite Cyber Analyst. The Cyber Analyst delivers actionable intelligence to customer security and operational environments to drive decision-making and action, and serves as a conduit to cybersecurity, threat intelligence, and information operations professionals.

Responsibilities

• Evaluate tools and best practices for tracking advanced threats, attacker tools, techniques, and procedures (TTPs), attacker motivations, and industry and attacker trends.
• Perform strategic, tactical, and operational research and analysis of adversarial cyber threats.
• Correlate intelligence to develop an understanding of tracked threat activity.
• Present tactical and strategic intelligence about threat groups, their methodologies, and motivations; convey the importance of findings to a variety of audiences.
• Work with customers to determine intelligence needs and requirements; prepare and deliver briefings and reports to customer executives, security teams, and fellow analysts.

Minimum qualifications

• Bachelor’s degree or equivalent practical experience.
• 5 years of experience in a customer-facing investigative cybersecurity role, such as Network Forensics Analyst, Threat Intelligence Analyst, Cybersecurity Analyst, or Threat Hunting.
• Experience with project management.
• Experience with Threat Intelligence Platforms.
• Experience engaging with and presenting to technical stakeholders and executive leaders.

Preferred qualifications

• 7 years of experience evaluating forensic reports of electronic media, packet capture, log data, malware triage, or enterprise-level information security operations.
• Experience with CTI methodologies and their application within cybersecurity organizations.
• Experience analyzing CTI to support monitoring, detection, and response capabilities.
• Experience deploying and analyzing data from technical security controls, including web proxies, firewalls, IPS, IDS, enterprise antivirus solutions, and network analyzers.
• Experience with standard network logging formats, network management systems, network security monitoring systems, and security information and event management.