Description

Research adversary tactics, techniques, and procedures (TTPs) to support threat intelligence operations and map activity to the MITRE ATT&CK framework.

This role is on-site.

Responsibilities

• Research new TTPs using GitHub, social media, security vendor reports, dark web, and underground forums.
• Identify MITRE ATT&CK techniques, indicators of compromise (IoCs), associated malware, and threat actors.
• Create at least two TTP instance notes daily and one malware detection rule monthly.
• Map reported activity to the MITRE ATT&CK framework and produce clear technical reports.
• Protect client-supplied and generated information from unauthorized access, disclosure, or modification.

Required Skills

• Two years of professional experience in cyber security.
• Technical proficiency in Cyber Threat Intelligence and Threat Intelligence Platforms.
• Experience working with Open Source Intelligence (OSINT) and large data sets.
• Familiarity with the MITRE ATT&CK framework.
• Experience working with sandboxes, virtual machines, or malware analysis tools.
• Ability to produce clear, concise technical reports on malware, vulnerability exploits, and offensive security tools.
• Strong written communication skills in English.

Preferred Skills

• Proficiency in scripting languages including PHP, C, C#, C++, Python, HTML, Base64, or Powershell.
• Experience creating malware detections using YARA, Sigma, or Snort.

Key Skills

Education

Any Gradute