Threat Intelligence Engineer

Who we are?

We are AB-InBev, a Global leading brewer and one of the largest consumer goods company in the world. We are proud owners of brands like Budweiser, Corona, Stella Artois, and other 500 local and regional brands. With 180,000 employees passionate about beer and operating in over 50 markets, our brands are sold in more than 150 countries worldwide.

AbInBev is expanding its technological footprint in Israel and opening an Innovation Technology Hub - The Beer Tech. After acquiring Weissbeerger with their cutting-edge Big Data product and technology, AB-InBev is now growing its Technology capabilities in our Tel Aviv brand new offices to develop Cybersecurity, Food Tech, and Agro-Tech.

Join our team to provide Cyber Security solutions to AB-InBev. We are looking for a Threat Intelligence Engineer.

Who are we looking for?

We are seeking a highly skilled and experienced Threat Intelligence Engineer to join our cybersecurity team. The Threat Intelligence Engineer will be responsible for leading efforts to identify, analyze, and mitigate cybersecurity threats targeting the organization. This role involves gathering, analyzing, and disseminating actionable intelligence from various sources to proactively reduce risks. The ideal candidate will have a deep understanding of cyber threats, attack techniques, threat actor behavior, scripting capabilities, intelligence methodologies, and will play a critical role in the organization’s security operations.

Responsibilities:

• Develop and implement scripts, tools, and processes for automating threat intelligence collection in daily tasks.
• Experience in developing, implementing, and maintaining YARA rules for detecting and classifying threats across various environments. Ability to write, optimize, and deploy YARA-based detection signatures for identifying malware, exploits, and other security indicators.
• Enhance and mature the organization’s threat intelligence capabilities by developing processes, tools, and frameworks.
• Hands-on experience with MISP for managing, sharing, and analyzing threat intelligence. Ability to create, share, and consume structured threat intelligence data (e.g., IOCs, TTPs) within MISP to support proactive defense and incident response efforts.
• Collect, process, and analyze threat data from internal and external sources (e.g., OSINT, dark web, threat feeds, and trusted partners).
• Identify and track advanced persistent threats (APTs), malware, vulnerabilities, and emerging cyber threats to assess their potential impact on the organization.
• Correlate and contextualize data to produce actionable intelligence reports.
• Map adversary techniques and tactics to frameworks like MITRE ATT&CK and Diamond Model.
• Track ongoing threat campaigns and provide insights to the security operations team.
• Collaborate with Security Operations Center (SOC), Incident Response (IR), and Vulnerability Management teams.
• Provide intelligence-driven recommendations to improve detection, prevention, and response capabilities.
• Develop threat models and contribute to Red Team exercises.

Requirements:

• 5+ years of experience in cybersecurity, with at least 3 years in threat intelligence.
• Highly skilled with scripting languages (e.g., Python, PowerShell) for automation purposes and experience with APIs for data collection.
• Strong knowledge of cyber threat frameworks (MITRE ATT&CK, Diamond Model, Kill Chain).
• Proven experience in conducting threat research and analysis.
• Strong background in analyzing malware, phishing campaigns, and advanced attack vectors.
• Proficiency in analyzing indicators of compromise (IOCs) and indicators of attack (IOAs).
• Strong analytical, problem-solving, and critical thinking abilities.
• Excellent communication and reporting skills.
• Team player with leadership qualities.

Advantages:

• Experience with threat hunting.
• Experience in dealing with third-party intelligence providers and partners.
• Certifications such as GCTI, CEH, CCTA etc.
• Familiarity with cloud environments (AWS, Azure, Google Cloud) and cloud security threats.