Cyber Threat Analyst

Cellebrite enables global customers to protect and save lives through digital investigation and intelligence-gathering solutions. The Cyber Threat Analyst will serve on the Threat Ops team’s first line of defense by monitoring and responding to security incidents, improving SIEM detection rules, conducting threat hunting and vulnerability management, and supporting security automation, reporting, audits, and incident response planning.

Responsibilities:

• Monitor and respond to security events, execute response related actions including documentation, manage the event to its fast resolution
• Continuously monitor SIEM alerts to improve and tune the identification and response rule. Create new rules based on trending cyber-attack methods and business threats strategy
• Threat Hunting – perform hunting activities
• Vulnerability Management – Generate reports using vulnerability scanning tools and collaborate with stakeholders to ensure progress
• Generate reports for IT administrators, business managers, and security leaders to evaluate the efficiency of the security policies and controls
• Advise and implement necessary changes required to counter the attack or improve security standards. This to include automating processes
• Document incidents to contribute to incident response and disaster recovery plans
• Perform internal and external security audits

Requirements:

• Minimum 5 years experience as a Tier 2 Cyber Threat Analyst
• Certifications: Security+ or CEH
• Proven experience with SIEM (Rules, Parsing, Correlation, Investigation)
• Proven experience with Playbook implementation (e.g. Palo Alto XSOAR)
• Proven experience with Threat Hunting
• Familiarity with methodologies, such as Cyber Kill Chain and MITRE ATT&CK
• Experienced with multi-cloud platforms (Azure, AWS)
• Strong knowledge of the TCP/IP topology, network protocols, active directory, and File permissions
• Experience with writing incident response reports
• Excellent communication skills to engage with stakeholders at all levels
• Team player, very organized and structured, attention to detail
• Must be a US Citizen with the ability to obtain a clearance
• Experienced with network and security systems (network device, security device, endpoint devices, EDR, FW, OS- Windows, Linux, Mac)
• Scripting: Powershell, Python
• prefer candidates in the Eastern timezone