Associate Cyber Intelligence Analyst

Rapid7 is looking for a Managed Digital Risk Protection Threat Intelligence Analyst to join our “Threat Command” team and take our threat intelligence analysis capabilities to the next levels.

About The Team

As a Managed Digital Risk Protection Threat Intelligence Analyst at Rapid7, you will be responsible for reviewing alert data to identify threat activity in customer environments. You will be empowered to steer investigations, including everything from evidence acquisition and analysis to figuring out how the intrusion began to identify any malicious or unexpected activity related to the event. Your colleague, a Customer Advisor, will be responsible for direct communication with the customer, and you will have fellow analysts who will be ready to help you if you encounter a problem or have a question.

About The Role

In this role, you will:

• Perform monitoring of alerts on areas including phishing and credential harvesting sites, and data leakage, dark web monitoring.
• Write findings for each investigation, which includes your intelligence analyst findings and remediation recommendations for customers.
• Research and implement new tools and data sources to expand analysis on emerging cyber threats.
• Assist the internal analyst team with use case development, query development, and alert tuning.
• Create new standard operating procedures to assist analysts with repeatable daily work.
• Produce intelligence outputs to provide an accurate description of the current threat landscape.
• Communicate with Customer Advisors on client requests for Information and investigation findings.
  
  

• 2+ Year experience in cyber intelligence or equivalent role with advanced familiarity with cybercrime communities and OSINT sources and tools.
• Experience in investigating threats, utilizing OSINT, HUMINT and other research techniques to uncover threat actors and their TTPs while providing context to threats and reaching conclusions from incomplete or missing data.
• Technical know-how on extracting threat data (IP’s, domains, ports, malware, and malicious communications) from multiple sources.
• Business understanding and familiarity with corporate security solutions.
• Excellent interpersonal and teamwork skills.