Senior Cyber Threat Intel Analyst

*** MUST BE A US CITIZEN ***

About the Role You Are Considering:

The Managed Detection and Response (MDR) program at Capgemini is expanding our DECODE team with the addition of an experienced and motivated Senior Cyber Threat Intelligence Analyst. The DECODE team stands at the forefront of defending client cyber operations, combining the expertise of CTI Analysts and Detection Engineers under one team. This integrated approach ensures rapid operationalization of threat intelligence into actionable detections, forming the backbone of our MDR service. Our frontline SOC Analysts are thus equipped with timely alerts and vital intelligence for swift incident response and threat hunting. 

Your Responsibilities:

• Research and analyze emerging threats, utilizing the CTI lifecycle for daily collections.
• Curate and communicate intelligence on the cyber threat landscape, including cyber threat actors, malware, vulnerabilities, and adversarial TTPs.
• Develop and disseminate intelligence products to stakeholders, facilitating robust defensive countermeasures.
• Conduct regular briefings to convey cyber threat intelligence to both technical and non-technical audiences, supporting Computer Network Defense (CND).
• Collaborate with Detection Engineering for rapid development of SIEM and EDR detections based on your research and analysis of emerging threats and adversarial TTPs.
• Develop, tune, and maintain detections using file scan and network signatures (YARA/Suricata).
• Curate IOCs and manage and maintain indicators in a Threat Intel Platform (TIP) such as MISP.
• Collaborate with other MDR teams for incident analysis and IR activities as needed.
• Engage with internal teams to continually enhance the CTI lifecycle through innovation, automation, and best practices.

Your Experience

• Bachelor of Computer Science or 5+ years equivalent experience in Cyber Threat Intelligence.
• 5+ years of experience applying analytical frameworks like Lockheed Martin Cyber Kill Chain, Diamond Model of Intrusion Analysis, and MITRE ATT&CK Framework.
• 5+ years of technical security experience implementing information security best practices.
• 3+ years of experience in tracking, profiling, and prioritizing activities of broad-based and APT groups.
• 3+ years of experience demonstrating a deep understanding of advanced adversarial tactics, techniques, and procedures, and developing relevant detection and defensive countermeasures.
• Capability in producing threat report products (Strategic, Operational/Technical, Tactical).
• Ability to communicate complex technical information effectively to both technical and non-technical stakeholders.
• Proficient in problem-solving and critical thinking to evaluate threats and recommend strategic defensive strategies.
• Proficiency in translating threat intelligence from OSINT, public/private reports, and dark/deep web analysis into custom detections and mitigations across various security technologies.
• Deep understanding of network protocols, Linux/Windows/Mac OS internals, and various cybersecurity tools and technologies. Such as, SIEM and EDR systems, intrusion detection/prevention systems, firewalls, proxies, etc.
• Familiarity with integrating open-source tools into the C