Cyber Threat Intelligence Specialist

City, London
Spencer Rose Ltd

Cyber Threat Intelligence Specialist

City of London (hybrid)

Up to £67,000 per annum + annual discretionary bonus

On behalf of a City of London based financial services organisation, I am seeking an experienced Cyber Threat Intelligence Specialist to join their team. As a Cyber Threat Intelligence Specialist, you will strengthen the Group’s Threat Intelligence program by collecting, processing, analysing, and disseminating actionable intelligence, and driving the continual growth and maturity of the program. The ideal candidate will have the ability to aggregate and present intelligence at the strategic, operational, and tactical level.

Due to the organisation operating a hybrid work model, you must be within commutable distance of their City of London offices and willing to be office based at least 2 days per week.

Responsibilities:

• Build relationships and work with stakeholders from within Cyber Security and the wider organisation to define intelligence requirements.
• Maintain knowledge and understanding of the cyber threats facing financial organisations.
• Coordinate the implementation and ongoing management of threat intelligence tools and platforms.
• Identify strategic, tactical, and operational intelligence trends, patterns, and behaviour to provide business-focused, impactful intelligence. Develop and deliver high quality written and verbal briefing material, communicating the threat landscape for a range of audiences up to and including C suite.
• Manage relationships and outputs of third-party Cyber Threat Intelligence partners.
• Support threat detection and incident response activities with research and analysis.
• Enable the wider organisation to use threat intelligence for informed decision making.
• Explore opportunities to work with other financial institutes, regulators, and authorities to share intelligence.

Skills/Experience required:

• In-depth knowledge of the current tactics, techniques, and procedures (TTPs) used by threat actors and experience using frameworks such as MITRE ATT&CK.
• Strong technical and analytical security skills required with a minimum of 2 years’ experience working in an intelligence role.
• Strong understanding of the Threat Intelligence life cycle methodology.
• Communication and presentation skills, with the ability to explain complex topics simply.
• Knowledge of security operations, network monitoring or analysis, intrusion or anomaly detection analysis, threat hunting, threat attribution assessment.
• Knowledge of and experience with standard network logging formats, network management systems and network security monitoring systems, security information and event management, network packet analysis tools, and forensic analysis tools.
• Knowledge of and experience with web Proxy, Firewalls, IPS, IDS, mail content scanning appliances, enterprise Antivirus solutions, Network Analysers, and domain name Servers desired
• Good understanding of TCP/IP and networking technologies/protocols
• Experience of working in an NIST and/or ITIL controlled environment.
• Should be working towards or have one or several the following certifications: CRTIA, CRTIM, CRISC, CISSP, CCSP, Relevant GIAC certifications.