Principal Analyst, Mandiant Threat Intelligence Services

US•Durham

Hybrid

Senior

Full Time

💰$168,000 - $243,000

remote

Requirements

•Bachelor's degree or equivalent practical experience
•8 years of experience in a customer-facing investigative role in cyber security (e.g., Network Forensics Analyst, Threat Intelligence Analyst)
•Experience engaging with, and presenting to, technical stakeholders and executive leaders
•Experience with project management

•Evaluate tools and best practices for tracking advanced threats, tools, techniques, and procedures (TTPs) of attacker’s motivations, and industry and attacker trends
•Perform strategic, tactical, and operational research and analysis of adversarial cyber threats
•Correlate intelligence to develop deeper understandings of tracked threat activity
•Communicate complex technical findings clearly to technical and non-technical stakeholders
•Partner with operational and tactical intelligence practitioners to identify and action evolving intelligence needs and request for information (RFIs)
•Work with customers to determine their intelligence needs and requirements
•Prepare and deliver briefings and reports to the customers' executives, security team, and fellow analysts
•Provide Mandiant Threat Intelligence Services supporting a key account
•Deliver intelligence expertise to various client stakeholders
•Serve as a tactical liaison to Cyber Defense stakeholders in Detection Engineering, Threat Hunt, and Threat Emulation functions

•10 years of experience evaluating forensic reports of electronic media, packet capture, log data, malware triage, or enterprise-level information security operations
•Direct experience processing and analyzing tactical Cyber Threat Intelligence (CTI) within a fast-paced operational environment
•Experience evaluating host and network forensic reports of electronic media, packet capture, log data analysis, malware triage and network devices in support of information security operations
•Ability to correlate raw intelligence from sensors, incident response engagements, and other sources into reports and briefings
•Ability to take complex, ambiguous topics, build strategy, and influence stakeholders