Threat Intelligence Analyst

Há 5 dias

Leça do Bailio, Porto, Portugal Thales Group Tempo integral

## Threat Intelligence AnalystApply:

Hybrid:

Leca do Balio:

Full time:

Posted Today:

R0341231Location: Leca do Balio, Portugal

Key Responsibilities
* Support Digital Risk Protection (DRPS) activities, including monitoring leaks, external attack surfaces, fraud threats and digital risks.
* Monitor, identify, and analyze emerging cyber threats, threat actors, campaigns, and attack techniques.
* Produce tactical, operational, and strategic threat intelligence reports.
* Conduct research on cybercriminal groups, ransomware operations, vulnerabilities, exploits, and threat trends.
* Contribute to threat intelligence briefings, customer reports, executive and operational-level reports.
* Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and map findings to frameworks such as MITRE ATT&CK.
* Enrich threat intelligence platforms and knowledge bases.
* Collaborate with SOC, Incident Response, and other internal and external cybersecurity teams.
* Participate in the continuous improvement of intelligence processes, methodologies, and automation initiatives.Required Qualifications* Higher education degree or technical-professional qualification in Cybersecurity, Computer Engineering, Networks, or a related field.
* Minimum of 3 years of experience in related roles.
* Experience with Digital Risk Protection, brand monitoring and Fraud monitoring.
* Experience with OSINT and SOCMINT techniques, dark web monitoring and intelligence gathering.
* Knowledge on Cyber Threat Intelligence and Threat Exposure Management platforms such as Recorded Future, Sixgill, Flare, or similar.
* Experience with Threat Intelligence Platforms (TIPs) such as OpenCTI, MISP, ThreatQ, or similar.
* Understanding of cyber threat actors, malware, ransomware, phishing, and common attack vectors.
* Familiarity with threat intelligence frameworks and methodologies.
* Relevant certifications or training (e.g. CTIA, GCTI, CPTIA) will be considered an asset.
* Strong analytical, research, and report-writing skills and ability to communicate technical findings to both technical and non-technical audiences.
* Team-oriented mindset, organizational skills, sense of responsibility, and ability to work effectively in dynamic and collaborative environments.
* Basic knowledge of malware analysis and network traffic analysis and familiarity with SIEM solutions and other security monitoring tools.
* Basic scripting and programing skills will be appreciated (Python, PowerShell, Bash).
* Good written communication skills and ability to understand technical English;
* Native Portuguese speaker and professional proficiency in English (C1).



Location:
Lisbon or Porto (hybrid working model)