Senior Cyber Security Analyst (Tier 2/3)

Company Description Intensity Global Group (IG) is a cybersecurity technology consulting company specializing in information security, incident response, and cyber intelligence. The company has developed advanced attack methodologies that simulate real-world hacker perspectives, enabling identification of unknown threats and hidden vulnerabilities. IG provides security services delivered by experienced cybersecurity researchers and experts who design and implement comprehensive solutions for complex environments. Founded in 2008, IG supports government agencies, telecommunications providers, global technology companies, financial institutions, defense organizations, insurance firms, and managed service providers worldwide. With offices in North America, Asia Pacific, and its global headquarters in Israel, IG focuses on helping clients detect, prevent, analyze, and respond to sophisticated cyber-attacks and zero-day threats.

Role Description The Senior Cyber Security Analyst (Tier 2/3) is a full-time, hybrid role based in Haifa with flexibility for partial work from home. This role involves monitoring, investigating, and responding to complex security incidents, including zero-day exploits, advanced persistent threats, malware, and ransomware. The analyst will perform in-depth threat analysis, coordinate incident response activities, and support the development and tuning of detection rules and security controls. Responsibilities include conducting security assessments, reviewing application and network architectures for vulnerabilities, and collaborating with internal teams and clients to strengthen overall security posture. The role also includes producing clear documentation, incident reports, and recommendations, and mentoring junior analysts to ensure consistent, high-quality security operations.

Qualifications

• 3+ years of hands-on experience as a Cyber Security Analyst (Tier 2/3 / IR).
• Deep, hands-on expertise in Splunk: Proficient in complex SPL queries, dashboard creation, and custom alert development.
• Deep, hands-on expertise in CrowdStrike Falcon: EDR/XDR investigation, real-time response, host containment, and policy configuration.
• Strong knowledge of attacker TTPs and frameworks (MITRE ATT&CK).
• Solid understanding of OS internals (Windows/Linux), networking protocols (TCP/IP, DNS, HTTP/S), and cloud environments (AWS/Azure).
• Excellent analytical skills, initiative, and strong interpersonal skills.

You can send your CV to [email protected]