Threat Intelligence Analyst

About the role

Our reputation data is only useful if it is accurate and trusted. As a Threat Intelligence Analyst, you will review abuse reports, investigate patterns of malicious activity and help keep our data reliable for customers and the wider community.

Responsibilities

• Review and classify incoming abuse reports and validate evidence
• Investigate emerging campaigns and the infrastructure behind them
• Identify false positives and help improve detection rules and data quality
• Write clear findings for customers, partners and internal teams

Requirements

• Hands-on experience in threat intelligence, SOC or abuse operations
• Working knowledge of IP reputation, DNS, email abuse and common attack techniques
• Ability to analyse data and explain findings clearly in written English
• Comfort working independently and prioritising a busy queue

Nice to have

• Experience with threat intelligence platforms or feeds
• Scripting ability in Python or SQL for analysis