Threat Intel Analyst

Cybersecurity Analyst- Threat Intel

This is a remote role

D&H is growing! Join 100 year old Employee-Owned technology distributor, offering end-to-end solutions for today's resellers, retailers, and the clients they serve across the SMB and Consumer markets.

• We are empowered by our employee Co-Owners who provide the industry’s best service, and we promote a collaborative culture.
• We offer an Employee Stock Ownership Plan, 401k, Paid Time Off, Medical, Prescription, Dental and Vision benefits as well as Gym Reimbursement, Work from Home Reimbursement, Employee Purchase Program, Tuition Assistance and much more!
• As a D&H Co-Owner you receive numerous discounts on services.
• We feel strongly about giving back to the community and promoting sustainable, eco-friendly business practices.
  
  

Summary

The Threat Intelligence Analyst role manages the creation, maintenance, and planning of all threat intelligence activities within the organization. The role requires excellent researching skills with the ability to automate substantial amounts of data and organize it in a consumable way both by technical and non-technical resources. The role will require extensive research, using multiple sources, and employing various advanced analytical techniques to extract actionable insights. And with that research, enrich the internal tools of D&H to stay ahead of the attack space as it constantly evolves. This role will also need to work between teams and departments to make sure everyone is kept apprised of those changes in the industry.

Essential Duties And Responsibilities

• Defines and documents practices of the threat intelligence and monitoring team
• Works with manager to support other team members to implement and continuously improve team practices
• Assists with the day-to-day activities of threat intelligence from OSINT, network and vulnerability monitoring, anomaly detection, and incident resolution
• Responsible for the maintenance of the SIEM and collection tools
• Integrate new threat feeds into the SIEM and security tools for data enrichment and enforcement
• Maintain SIEM rules and correlation activities
• Map threats to the MITRE ATT&CK framework and communicate effective mitigation procedures
• Understand the company’s threat landscape and key threat actors
• Automate threat response activities through the SOAR platform
• Create and support workflow approvals through SIEM alerts to perform various activities
• Assists the SOC team and third party MDR relationships
• Maintain the EDR and XDR environment
• Responsible for the reporting of intelligence reports, threat briefings, and assessments
• Stay current with the latest trends and developments in the threat intelligence industry
• Maintain detailed knowledge of cybersecurity frameworks such as NIST, CIS, and other security technology by attending workshops and reviewing publications
• Assists other team members while working with business units to remediate identified issues
• Independently maintain complex project tasks, interface with various teams, and ensure other team members remain on schedule
• Provide training and mentorship to other members of the team
• Aid in the design of security policies for the organization
• Assist in process improvements to enhance the efficiency of current operational procedures
• Effectively deal with rapid change in a positive manner and lead staff through changing priorities Coordinate relations with and serve as a liaison between business and IT staff
• Develop short-term and long-term department goals which support long-term strategic goals
• Participate in all company/location driven communication efforts, including huddles, department meetings, and other related efforts
• Maintain a positive and professional working relationship with peers, management, support resources, and the community with a constant commitment to teamwork and exemplary customer service to present a professional image of D&H Distributing
• Perform all other duties as assigned by management in a professional and efficient manner
  
  

EDUCATION And/or EXPERIENCE

• Associates degree in Cybersecurity or similar area of study required or equivalent years of related work experience
• Bachelor’s degree in Cybersecurity or similar area of study preferred
• 5 years of experience in cybersecurity, with 1-3 years of experience in threat intelligence, analysis, or collections, and their respective lifecycles
• Strong ability to automate tasks in the SIEM and security team using SOAR techniques
• Experience with system maintenance, monitoring, and alert resolution preferred
• Industry certifications (CEH, Security , SANS, CISSP, OSCP, CCNA Security or similar) preferred
• Scripting experience in PowerShell, Python or Perl preferred