Cyber Threat Intelligence Senior Analyst - Cyber Detection and Response

Join EY in Kolkata, West Bengal, India, and build a career that's as unique as you are. We offer global scale, support, an inclusive culture, and the technology to help you achieve your best.

Role Overview

We are looking for a highly skilled Senior Cyber Threat Intelligence Analyst to join the Canada CTI team. This role focuses on gathering, analyzing, and distributing actionable intelligence to bolster cybersecurity operations and safeguard the organization against evolving threats. You will collaborate with internal and external partners, conduct thorough threat research, and contribute to intelligence-driven strategy development.

Responsibilities

• Lead the monitoring and analysis of emerging cyber threats across various sectors, including Finance, Healthcare, and Education.
• Conduct in-depth analysis of advanced threat actor campaigns, including their Tactics, Techniques, and Procedures (TTPs), and translate these findings into actionable intelligence.
• Develop and maintain a comprehensive repository of cyber threat data to support risk assessment and trend analysis.
• Create and deliver detailed reports (Strategic, Tactical, and Operational) to stakeholders, ensuring technical findings are communicated clearly.
• Develop and document threat intelligence playbooks and procedures.
• Enhance security detection capabilities using rule sets such as YARA, SIGMA, and Snort.
• Collaborate with cross-functional teams to evaluate risks and propose mitigation strategies.
• Refine and improve alerts generated by threat intelligence platforms.
• Utilize Open-Source Intelligence (OSINT) techniques to validate and prioritize alerts, escalating critical threats promptly.
• Work closely with international IT teams and third-party vendors to understand adversary intent and activities.
• Stay current with the latest cybersecurity trends, vulnerabilities, and attack methodologies.
• Contribute to the design and enhancement of the organization's Threat Intelligence Program.
• Participate in assessing, analyzing, and designing improvements for the Threat Intelligence Program.
• Perform ad-hoc intelligence gathering using OSINT tools and techniques.
• Apply creative and critical thinking to problem-solving.

Required Qualifications

• Bachelor's degree in Computer Science or equivalent, complemented by a certification such as GCTI (GIAC Cyber Threat Intelligence).
• Extensive experience with threat intelligence platforms and playbook development.
• Proficiency in utilizing frameworks like MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.
• Strong analytical skills and demonstrated expertise in OSINT techniques.
• Advanced understanding of cybersecurity incidents, attack vectors, and threat actor behavior.
• Familiarity with programming languages like Python, APIs, Docker containers, and automation tools.
• Proven ability to work independently and manage complex situations effectively.
• Excellent verbal and written communication skills, with the ability to deliver effective briefings to diverse audiences.

Additional Information

• This position requires support during Canada business hours.