SOC Analyst - Cyber Threat Intelligence

Senior SOC Analyst focusing on cyber threat intelligence and threat detection/response. Owns CTI collection and operationalization, threat actor profiling, and the development of detection logic using SIEM/EDR/cloud-native tools, while leading proactive threat hunts.

• Lead complex investigations into APTs, ransomware, insider threats
• Collect, analyze, and operationalize CTI from OSINT, commercial feeds, ISACs
• Create and present intelligence assessments and executive briefings
• Track and profile threat actor TTPs using MITRE ATT&CK
• Develop and maintain advanced detection logic using SIEM, EDR, and cloud-native tools

Hands-on with SIEM (Azure Sentinel) and EDR (Microsoft Defender), cloud security tooling, scripting (Python/PowerShell/Bash), MITRE ATT&CK, SOAR, and forensics. Integrates CTI from OSINT, ISACs, and internal telemetry; develops executive briefings and KPI-driven analytics.

The ideal candidate is a senior SOC analyst with 5+ years in SOC/CTI, hands-on experience with Azure Sentinel and Microsoft Defender, and a strong track record integrating CTI into detection and response. They excel at leading investigations, mentoring others, and communicating complex intel to technical and executive audiences.

Preferred