Job Description:
Role Senior Specialist Cyber Threat Intelligence
About the Company:
At AT&T, were connecting the world through the latest tech, top-of-the-line communications and the best in entertainment. Our groundbreaking digital solutions provide intuitive and integrated experiences for millions of customers across online, retail and care channels. Join our mission to deliver compelling communication and entertainment experiences to customers around the world as we continue to evolve as a technology-powered, human-centered organization. As part of our team, youll transform the way we deliver a seamless customer experience with digital at the center of all you do. In our world, digital is much larger than just an eCommerce channel, we are transforming all channels to digitally perform as one team to create a better customer experience. As we move into 2024, the digital transformation will revolutionize the digital space and you can build a career that will propel your future.
About the Job:
The Senior Specialist in Cyber Threat Intelligence investigates and researches cyber threats using a variety of sources, methods, analysis tools and techniques. The professional in this role derives actionable threat intelligence and provides analytical support to the Chief Security Office Threat Analytics organization.
The professional in this role will demonstrate knowledge or use of:
- Knowledge of the Intelligence cycle, including the collection, analysis, and dissemination of threat intelligence, and how it applies to dark web activities.
- Processes and techniques for intelligence, tactical, strategic, and administrative analysis.
- Common cybersecurity concepts, tools, and frameworks (e.g., NIST, MITRE ATT&CK, SIEM, IDS/IPS, etc.)
- Common cyber threats, attack methods and techniques (e.g. ransomware, malware, phishing, etc.)
- Cyber-attack stages (e.g. reconnaissance, scanning, enumeration, exploitation, privilege escalation, lateral movement, persistence, etc.)
The individual in this role will have demonstrated ability to:
- Identify cyber threats and create detective measures and IOCs.
- Identify patterns and trends in data with strong analytical and problem-solving skills.
- Identify False Positives and False Negatives.
- Use and configure threat intelligence platforms and tools (e.g., MISP, ThreatConnect, OpenCTI or equivalent).
- Stay current with the latest developments in cybersecurity and threat intelligence.
- Use Open-Source Research Techniques to discover related threats.
- Adhere to established rules, regulations, conventions, and information protection requirements with a demonstrated sense of responsibility and ethics.
- Work independently and collaboratively in a fast-paced & dynamic environment.
- Apply feedback to future work products.
The professional in this role will perform analysis of complex security issues and corresponding activities to help mitigate risk. Includes forward looking research, planning and strategy to strengthen our stance against future cyber security threats, and enhancing our mitigation techniques, processes, and technology solutions.
Experience Level: 8+ years
Location: Hyderabad / Bengaluru
Roles and Responsibilities:
- Perform deep technical analysis of suspicious activity using internal and external collection platforms, including but not limited to review of intelligence platforms, darkweb chatter, metadata and intelligence sources.
- Use proprietary and open-source intelligence sources to analyze and interpret telemetry, produce informative products, briefs, reports, and indicators of compromise.
- Configure and optimize internal and external threat monitoring systems to increase AT&T's intelligence holdings to maintain a high standard of quality for cyber indicators and adversary Tools, Techniques and Procedures.
- Document findings and recommend remediation action to a team of highly technical professionals with expertise in cybersecurity, threat intelligence, threat detection, networking, log, malware, and vulnerability analysis. Provide actionable intelligence reports.
- Identify and implement new analysis techniques, beyond those currently available.
- Detect threats and recommend detection mechanisms beyond the capabilities of common tools.
- Reduce the risk of False Positive or False Negative detections and improve detection logic for advanced and targeted threats that are missed by existing tools and controls.
- Implement new automation solutions to improve workflow efficiency.
- Be proactive and demonstrate the ability to analyze issues, generate ideas, and initiate action while achieving results.
- Effectively manages multiple tasks / projects with close attention to detail and meets short turnarounds and deadlines.
Primary / Mandatory skills:
- Overall At least 8+ years of experience in cybersecurity, threat intelligence, or a related field.
- Advanced knowledge of common cybersecurity concepts, tools, and frameworks (e.g., NIST, MITRE ATT&CK, SIEM, IDS/IPS, etc.).
- Hands-on experience with advanced threat intelligence platforms and tools (e.g., MISP, ThreatConnect, OpenCTI or equivalent).
- Strong analytical and problem-solving skills with the ability to identify patterns and trends in data and make data-driven decisions.
- Excellent communication skills, both written and verbal, with the ability to convey complex information in a clear and concise manner.
- A commitment to staying current with the latest developments in cybersecurity and threat intelligence through ongoing training and professional development.
- Ability to work both independently and as part of a team in a fast-paced, dynamic environment.
- Sense of urgency and attention to detail
Desirable skills:
- Information security credentials CISSP, SANS certifications(such as GCTI / GCIH / GMON/ GCFA), or equivalent
- Bachelor's degree in computer science, cybersecurity, information technology, or a related field. Master's degree preferred.
- Proficiency with programming or scripting languages (e.g., Python, PowerShell, or equivalent).
Additional information (if any): Flexible to provide coverage in US morning hours on a need-basis, and as required.
Certification: Information security credentials CISSP, SANS certifications(such as GCTI / GCIH / GMON/ GCFA), or equivalent.
Weekly Hours:
40
Time Type:
Regular
Location:
IND:KA:Banglaore / Intl Tech Park, Whitefield Rd - Storage: Innovator Building, Itpb, Whitefield Rd
It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.
