Threat Intelligence Response Analyst

Written by the T&S Network from Recorded Future's posting.

Triage of alerts and ad-hoc investigations for a portfolio of corporate, commercial and enterprise clients in Recorded Future's Managed Services Group. The role delivers threat intelligence on adversary activity observed in customer environments, helping customers act on cyber threats.

What you'd do

• Sort incoming alerts for a set of corporate, commercial and enterprise clients across many industries.
• Provide insight into threats observed in customer environments so customers can mitigate them.
• Work with Services and Product teams to make the offering succeed inside customer environments.
• Take on new research and investigation requests raised by Managed Services customers as they come in.
• Explain actionable findings clearly to both technical and non-technical audiences.

What it asks for

• Hands-on background in threat intelligence, incident response or security monitoring.
• Good grasp of OSINT methods used for phishing, credential theft, domain and dark web monitoring, and threat actor profiling.
• Working knowledge of DNS, HTTP, email infrastructure, web hosting and malware delivery mechanisms.
• Clear speaking and writing skills, ideally with customer-facing experience.
• CompTIA Security+ certification completed or in progress (preferred).
• Experience with Salesforce, Gainsight, Notion and Zendesk (preferred).

Worth knowing

• Shift-based schedule to support global client coverage, with UK-based hours of 9:00am to 6:00pm GMT.

Terms in this role

OSINT.

Open-source intelligence: investigating with publicly available information, such as social media, public records, archived pages and imagery.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Recorded Futurenorth_east before you apply. If we got something wrong, report this listing.