Consultant, Cyber Threat Intelligence Analyst

TransUnion's Job Applicant Privacy Notice

What We'll Bring:

At TransUnion, we have a welcoming and energetic environment that encourages collaboration and innovation. We are consistently exploring new technologies and tools to be agile. This environment gives our people the opportunity to hone current skills and build new capabilities, while discovering their genius.
Come be a part of our team – you’ll work with great people, pioneering products and cutting-edge technology.
Job Description:
The Cyber Threat Intelligence Analyst will serve as a subject matter expert for their assigned team as it relates to the processes of intelligence collection and reporting, vulnerability analysis, threat detection and response.

As a technical analyst, this role requires strong analytical, critical thinking, and creative problem-solving capabilities to respond to complex and/or priority intelligence requirements.
This role requires a detailed working knowledge of current and emerging security technologies, industry trends, latest threats, counter measures, and best practices, as well as the ability to strongly and effectively communicate this knowledge and make recommendations to stakeholders.
The Cyber Threat Intelligence Analyst will build and produce recurring finished threat and vulnerability intelligence products for broad internal consumption, driving security operations that reduce risk exposure.
Core Duties / Responsibilities:
• Produce regular reporting on cyber threats including tactics, techniques, and procedures (TTPs)
• Provide timely and actionable vulnerability intelligence analysis
• Attack Surface Management alerting, evaluation and reporting
• Support cyber defense signature development, curation, and automation development
• Perform intelligence-based investigations across enterprise telemetry, curating indicators for use in alerting
• Perform daily continuous monitoring checks against clearnet and deep-and-dark web alerting to identify emerging topics
• Support stakeholder requests for information, providing actionable intelligence to cyber defense teams

What You'll Bring:

Required Skills:
• Core skills required (limit to 5)
o Technical acumen including an understanding of enterprise security network architecture and security operations
o A deep understanding of the modern cyber threat landscape
o An understanding of the intelligence cycle, threats, and attack vectors
o An analytical mind-set coupled with a proven ability to analyze and utilize data and create Threat Intelligence ranging from curated indicators to threat actor TTP analysis
o Effective communication of complex topics to readers of varying technical familiarity

• Core technologies required (limit to 5)
o Python or other scripting languages
o Trend analysis and data analytics
o Strong working knowledge of SIEM and EDR technologies
o Maltego or other link-based analysis tools
o Threat Intelligence Platforms (TIPs)

• Core soft skills required (limit to 5)
o Experience working in a global team, effectively coordinating across disparate time zones
o Strong understanding of Cyber Threat Intelligence Operations
o Strong prioritization and time management skills
o Excellent written communication skills

• Previous experience
o Incident Response
o Vulnerability and threat management
o Working in complex, matrixed organizations

• Education (if applicable)
o Bachelor’s degree in Information Security, Information Technology, Computer Science, with three or more years’ work experience in a cybersecurity-related role; OR at least five years of work experience in a cyber-security specific role with a demonstrable understanding of the cyber threat landscape as well as best practice prevention and detection techniques.

Impact You'll Make:

We’d Love to See: (preferred skills, limit to 4-5 bullet points max)
• Preferred technologies (limit to 5)
o Strong programming skills, including the ability to build automations to streamline tasks
o Experience working with SIEM and SOAR automation technologies
o Experience working with and managing a threat intelligence platform

• Preferred soft skills (limit to 5)
o Outstanding communication and presentation skills
o Open-source intelligence gathering skills, including deep-and-dark web monitoring
o Experience working in a regulated environment and supporting complex compliance requirements
o Strong working knowledge of NIST CSF and MITRE intelligence frameworks

• Preferred years of or previous experience (limit to 5)
o Five years experience serving in a technical role
o Prior experience within Financial Services

• Preferred education (if applicable)
o CISSP
o GCTI
o GPEN
o GCIA
o CEH
o Security+
o Network+
Additional Job Description:
As a member of the Global Threat Intelligence team, you will play a key role in strengthening TU’s defensive capabilities and improving the company’s security posture.
• Analyze and interpret open and closed source intelligence and data to assess potential threats
• Identify and monitor the Tactics, Techniques, and Procedures used by threat actors
• Investigate network and endpoint telemetry to identify the presence of threat actor activity
• Develop and produce world-class finished intelligence products for a broad range of audiences
• Provide actionable insights, guidance and subject matter expertise to internal partners
• Utilize cyber threat intelligence to improve incident detection and response

TransUnion Job Title

Consultant, Cybersecurity