Associate Cyber Threat Intelligence Analyst

Location: New York

Associate Cyber Threat Intelligence Analyst

Location

New York

Business Area

Legal, Compliance, and Risk

 #

Description & Requirements
The Cyber Security Operations Center (CSOC) works to understand the cyber threats we face as an organization, develops instrumentation for detection and monitors events 24x7 looking for suspicious activity. We proactively learn from current trends to build relevant detections and contextual understanding into the program. We strive to monitor meaningful security events around the clock, respond quickly, but always favor quality over speed.

If an Incident occurs, we are prepared to engage appropriate stakeholders and take required actions as needed. The CSOC department reports into the CISO, and we work closely with Engineering, Legal, Compliance, Investigations and many others across the organization to help unify security event monitoring and incident response. Our colleagues depend on us to be incident response pros that have a deep understanding of IT networks and systems.

On any given day, the department may analyze cyber security events, hunt for suspicious activity, research and disseminate threat intelligence, identify improvement opportunities for detection rules, improve procedures and train analysts. This associate Threat Intelligence Analyst role is part of our Cyber Threat Intelligence Team (CTI) within the larger Threat Hunting, Intelligence and Response (THIR) program. What we do THIR intelligence analysts provide context, perspective, and analysis on threat actors, current activity, emerging trends, and tactics, techniques, and procedures.

Through research and detailed analysis, they produce in-depth coverage of espionage and cybercriminal threat actors relevant to Bloomberg. They support teams across Bloomberg’s information security program, including CSOC Security Analysis, threat hunting, incident response, and vulnerability management. We are trusted to deliver timely, accurate intelligence that is appropriately detailed, analytically rigorous, and actionable for each audience. We’ll trust you to:
Leverage Open-Source Intelligence (OSINT), vendor-based and private intelligence sources Perform daily processing of intelligence-based reporting and threat feeds Conduct focused research and analysis on specific threats and threat actors Perform threat hunts based on intelligence reporting and in support of incident response Transform raw intelligence information and knowledge into tangible products Demonstrate a passion and good judgment as a Threat Intelligence professional Learn and understand the broader security of Bloomberg’s environment Remain up-to-date with cyber security threats and trends Work with varying seniority levels throughout Bloomberg to address cyber security threats Generate ideas for continued improvement, including conceptual design of new threat scenarios You’ll need to have:
Excellent written and verbal communication skills Knowledge of common computer network exploitation (CNE)/computer network attacks (CNA) techniques Possess a basic understanding of tactical and operational intelligence analysis and be familiar with various cyber threat actors, attack vectors and techniques Knowledge of various malware types/families, attack tools, campaigns, espionage and crime actors Knowledge of technical analytical process and available toolsets Familiar with file analytics, including Microsoft Office Documents, PDFs, Rich Text Files, etc.

Familiar with behavioral malware analysis, both tools and techniques Familiar with all major operating systems (Linux, Windows, MacOS) at a system and userland level Ability to specialize in specific areas of expertise, process complex data, search for patterns and behaviors across…