Cyber Threat Intelligence Analyst

We are looking for an experienced, high-performing Cyber Threat Intel Analyst for our Cyber Threat Intel team with experience gathering cyber intel from multiple sources and aggregating that data to produce usable and actionable Cyber Threat Intelligence.  The Analyst is responsible for ensuring we are monitoring and analyzing threat past, present and future relevant to protecting Blackbaud.  This role requires an understanding of intel sources and the ability to produce a Cyber Threat Intel product that is both informative and potentially actionable.

What you'll be doing:

• Researches, collects, distills, and disseminates operational intelligence to key stakeholders/teams.

• Provides technical support, analysis and recommendations in the areas of attack and vulnerability trends, incident handling and network defense.

• Coordinates with team members to deliver timely and actionable hands-on intelligence delivered in a clear, concise manner.

• Work with Senior team members and various intelligence sources to maintain an agile and cutting-edge security posture for current threats.

• Alert detection, IR teams and key stakeholders/teams to emerging threats in a timely manner.

• Support the continued production of Cyber Threat Intel products in a timely and consumable format.

What we'll want you to have:

• 5+ years of relevant experience in threat intelligence, intrusion analysis, incident response, malware analysis or a similar role.

• Knowledge of the cyber threat landscape, including actors, TTPs, targets, etc.

• Broad understanding of information technology, including networking, operating systems and web application development.

• Exposure to Threat Intelligence Platforms (open source and/or enterprise grade)

• Ability to collect, analyze, document, and disseminate OSINT information using various means of collection methods.

• Demonstrated understanding of the intelligence life cycle, network threats, attacks, attack vectors and methods of exploitation with an understanding of intrusion set tactics, techniques and procedures (TTPs).

• Previous experience with a framework similar to MITRE ATT&CK framework and/or Cyber Kill Chain model.

• Demonstrated hands-on experience analyzing logs, network data and other attack artifacts.