Cyber Threat Intelligence Analyst

This role is an integral part of the Group IT Function, with a primary focus on global cyber threat intelligence development and delivery. You will be responsible for implementing cybersecurity technologies to support activities related to the Security Operations Centre. This is an exciting opportunity to work in a fast-paced environment where your contributions will have a direct impact on the security posture of the organisation.

Responsibilities:

• Support the global cyber threat intelligence operations for SOC
• Participate in cybersecurity engagements with a focus on Technical Security Assessment and Security Testing
• Align with vendors and the SOC team on deliverables
• Conduct analysis/testing on alerts/incidents/information triggered by CTI services, reporting findings and recommendations
• Conduct threat hunting against the company environment
• Investigate CTI source from OSINT and conduct vulnerability POC verification and testing in the SOC lab
• Communicate with other parties of the in-house units on remediation steps
• Work closely with internal teams on delivery, facilitating technical discussions and resolving technical issues impacting delivery

Requirements:

• Degree holder in Computer Science or related disciplines; Certified Ethical Hacker (CEH), Offensive Security Certified Professional certification (OSCP) or GIAC Penetration Tester (GPEN) preferred
• At least 2 years experience with Cybersecurity operations such as Penetration tests, Vulnerability Scanning etc.
• Ability to resolve conflicts and drive issues to resolution
• Strong problem-solving skills and fast learner
• Good interpersonal and communication skills; command of written and spoken English and Chinese (Mandarin and Cantonese)
• Experience of manual attack and penetration testing above automated tools
• Experience of security testing methods including network, operating system configuration review and internal/external penetration testing
• Broad knowledge of cybersecurity concepts including vulnerabilities, web application security, access controls and secure architectures