Threat & Vulnerability Analyst

Key Responsibilities

• Conduct vulnerability analysis using tools and techniques, including Common Vulnerabilities and Exposures (CVE), the Common Vulnerability Scoring System (CVSS), and the MITRE ATT&CK framework.
• Collaborate with cross-functional teams to remediate identified ZERO-day vulnerabilities and ensure a proactive approach to security.
• Discover, identify, and report regularly on significant cyber threats and risks to businesses, presented by cyber threat actors and groups originating in global regions.
• Participate in the drafting and dissemination of finished tactical and operational threat intelligence products (reports, briefings, etc.).

Requirements

• Deep understanding about critical security flaws in context of attack path and experience in fixing them.
• Strong knowledge about CVSS, CVE and MITRE ATTACK Framework.
• Research and analyse cyber-threat actors, groups, and events to report on threatening tactics, techniques, and procedures (TTPs), behaviours, motivations, sponsorship, and influencing factors.
• Sound knowledge and working experience in Threat Intel Platform e.g Anomali Threat Stream, Recorded Future etc.
• Familiarity with open-source intelligence (OSINT), social media intelligence (SOCMINT), human intelligence (HUMINT), and technical intelligence (TECHINT) gathering skills.
• Good understanding of the intelligence lifecycle and associated analytic methodologies (Cyber Kill Chain, Diamond Model, ATT&CK, etc.)
• Basic knowledge of SIEM, XDR, Defender, Vulnerability Management Tools like Rapid7 InsightVM and Palo Alto Firewall etc.

Experience and Educational Qualification

• 4+ years’ experience
• B.E./B.Tech. /M.Sc. / M.S / bachelor’s in cyber security related field would be preferred.
• Fluency in English is a must.

What we offer you

• Working at the world’s only fully integrated aluminum and leading renewable energy company
• Diverse, global teams
• Flexible work environment/home office
• We provide you the freedom to be creative and to learn from experts
• Possibility to grow with the company, gain new certificates
• Attractive benefit package