Associate Cyber Threat Intelligence Analyst

About the Role

The Cyber Threat Intelligence Team (CTI) within the Threat Hunting, Intelligence and Response (THIR) program analyzes cyber threats, develops detection instrumentation, and monitors for suspicious activity 24x7. The team provides context, perspective, and analysis on threat actors, current activity, emerging trends, and tactics, techniques, and procedures (TTPs).

Key Responsibilities

• Leverage Open-Source Intelligence (OSINT), vendor-based, and private intelligence sources.
• Perform daily processing of intelligence-based reporting and threat feeds.
• Conduct focused research and analysis on specific threats and threat actors.
• Perform threat hunts based on intelligence reporting and in support of incident response.
• Transform raw intelligence information and knowledge into tangible products.
• Demonstrate a passion and good judgment as a Threat Intelligence professional.
• Learn and understand the broader security of Bloomberg’s environment.
• Remain up-to-date with cyber security threats and trends.
• Work with varying seniority levels throughout Bloomberg to address cyber security threats.
• Generate ideas for continued improvement, including conceptual design of new threat scenarios.

Requirements & Tech Stack

• Excellent written and verbal communication skills.
• Knowledge of common computer network exploitation (CNE)/computer network attacks (CNA) techniques.
• Basic understanding of tactical and operational intelligence analysis.
• Familiarity with various cyber threat actors, attack vectors, and techniques.
• Knowledge of various malware types/families, attack tools, campaigns, espionage, and crime actors.
• Knowledge of technical analytical process and available toolsets.
• Familiar with file analytics (e.g., Microsoft Office Documents, PDFs, Rich Text Files).
• Familiar with behavioral malware analysis, including tools and techniques.
• Familiar with all major operating systems (Linux, Windows, MacOS) at a system and userland level.
• Ability to specialize in specific areas of expertise, process complex data, and search for patterns and behaviors across wide sets of data.
• Ability to write high-quality reports for various audiences.
• Ability to present findings and research to larger audiences outside of the security organization.
• Ability to work on an ad-hoc basis to support the needs of the organization.

Preferred Qualifications

• Experience with programming languages such as C, C++, Python, Unix Shell.
• Experience with malware analysis, dynamic and static, tools, and techniques.
• Experience with memory analysis and disk forensics.
• Knowledge of vulnerabilities and exploits.
• Ability to work in a fast-paced environment where priorities and focus shift regularly and deadlines get truncated.
• Bachelor of Arts or Bachelor of Science degree.