Threat Intelligence (InfoSec)

Threat Intelligence & Research:

• Collect, analyze, and operationalize cyber threat intelligence from open-source, commercial, and proprietary sources.
• Monitor and track emerging cyber threats, including nation-state actors, cybercriminal groups, and hacktivists.
• Develop and maintain threat intelligence reports, briefings, and dashboards to inform security teams and leadership.

Digital Risk Management:

• Identify and mitigate digital risks related to brand reputation, social media threats, impersonation, and fraudulent activities.
• Monitor dark web, underground forums, and illicit marketplaces for leaked credentials, intellectual property theft, and data breaches.
• Assess and track third-party and supply chain risks, providing intelligence-driven recommendations.
• Work with legal, fraud, and risk teams to develop mitigation strategies for digital threats.

Threat Hunting & Incident Response:

• Collaborate with SOC and Incident Response teams to provide intelligence-driven threat detection and response.
• Investigate advanced persistent threats (APTs) and targeted attacks using frameworks like MITRE ATT&CK and Cyber Kill Chain.
• Correlate threat intelligence with security events to enhance proactive threat detection.

Automation & Tooling:

• Utilize Threat Intelligence Platforms (TIPs), SIEM (Splunk, ELK), SOAR, and EDR for threat enrichment and automation.
• Develop custom threat detection rules and signatures using YARA, Sigma, and other frameworks.
• Work with AI/ML teams to enhance automated risk identification and threat detection capabilities.