FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Information Security Analyst – Cyber Threat Intelligence
Evertec. Monitor, analyze, and track cyber threats, threat groups, APTs, malicious campaigns, ransomware, and emerging TTPs, assessing potential impacts on the environment and the business .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in Cyber Threat Intelligence, Threat Hunting, and incident response, with a strong ability to analyze and correlate security events and logs. Proficient in using MITRE ATT&CK and various SIEM and EDR/XDR solutions to enhance security posture and threat detection.
Highest-signal resume keywords
Cyber Threat Intelligence (CTI)Threat HuntingMITRE ATT&CKSIEM SolutionsIncident Response
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat AnalysisMalware AnalysisSecurity Log AnalysisKQLSPLIOCsIOAsTTPsDigital InvestigationsForensic Analysis
Soft Skills
Clear CommunicationKnowledge SharingCollaboration
Tools & Technologies
Microsoft SentinelSplunkQRadarElasticMicrosoft DefenderCrowdStrikeTrend MicroSentinelOneSOARThreat Intelligence Platforms
Industry Keywords
Information SecuritySOC OperationsCyber Kill ChainDiamond ModelOSINTThreat Intelligence FeedsTCP/IPDNSHTTP/SActive Directory
Tech Stack
Tools & technologiesDNSLinuxOpen SourceSplunkTCP/IP
About the role
Key responsibilities & impact- Monitor, analyze, and track cyber threats, threat groups, APTs, malicious campaigns, ransomware, and emerging TTPs, assessing potential impacts on the environment and the business
- Produce Cyber Threat Intelligence analyses and insights, supporting the identification of relevant risks, trends, and threats
- Map threats and attack techniques using MITRE ATT&CK, correlating TTPs and indicators identified during analyses and investigations
- Support and perform Threat Hunting activities, helping identify suspicious behaviors and activities within the environment
- Analyze and correlate IOCs, IOAs, IOBs, logs, and security events, assisting in the identification and investigation of potential threats
- Support security incident investigations and response activities, contributing to evidence analysis, root-cause identification, and impact assessment
- Contribute to the creation and continuous improvement of detection rules and mechanisms in SIEM, EDR, XDR, and SOAR tools
- Perform malware and suspicious artifact analysis when necessary to support investigations
- Use and integrate intelligence from commercial, government, and open-source Threat Intelligence sources
- Prepare technical and executive reports, presenting relevant trends, risks, and threats appropriately for different audiences
- Support Purple Team and Red Team initiatives and defensive control validation, contributing an intelligence and defense perspective
- Share knowledge and serve as a day-to-day technical reference for mid-level and junior team members
- Work collaboratively with the SOC, Blue Team, Incident Response, Fraud, Infrastructure, and Offensive Security teams
Requirements
What you’ll need- Approximately 5 or more years of experience in Information Security, with experience appropriate for a senior-level position
- Experience in Cyber Threat Intelligence (CTI) and SOC operations or close interaction with a SOC
- Experience with Threat Hunting, threat analysis, and incident response
- Knowledge of MITRE ATT&CK, the Cyber Kill Chain, the Diamond Model, and the Intelligence Lifecycle
- Knowledge of IOCs, IOAs, and TTPs and their use in security analyses and investigations
- Experience with SIEM solutions such as Microsoft Sentinel, Splunk, QRadar, Elastic, or similar platforms
- Knowledge of EDR/XDR solutions such as Microsoft Defender, CrowdStrike, Trend Micro, SentinelOne, or similar platforms
- Knowledge of KQL, SPL, or other query languages used to analyze security events
- Experience analyzing and correlating security logs and events
- Knowledge of Windows, Linux, and Active Directory
- Knowledge of networks and protocols, including TCP/IP, DNS, HTTP/S, and authentication protocols
- Knowledge of OSINT, Threat Intelligence Platforms, and Threat Intelligence feeds
- Knowledge of digital investigations and basic forensic analysis
- Ability to analyze technical information, correlate evidence, and clearly communicate risks and recommendations
- Bachelor’s degree or equivalent higher education qualification
- Preferred qualifications: experience with OpenCTI and MISP; knowledge or use of VirusTotal, Shodan, and GreyNoise; experience with Recorded Future or CrowdStrike Intelligence; experience with SOAR and security process automation; advanced malware analysis skills; participation in Purple Team or Red Team initiatives; intermediate-level English and/or Spanish or higher
Benefits
Comp & perks- Meal or food allowance
- Flexible benefits (Flash)
- Medical insurance
- Partners providing psychological, legal, financial, and nutritional support (CLUDE, C4LIFE, and ASQ)
- Psicologia Viva
- Dental insurance
- Childcare allowance
- Allowance for children with special needs
- Fertility assistance
- Extended maternity and paternity leave
- Transportation allowance or Home Office allowance (for telework contracts)
- Gympass (Wellhub) and TotalPass
- Flexible working hours
- Life insurance
- Partnership benefits club
- Partnership with Sesc
- Dress code-free workplace
- Birthday day off
- Beca (education incentive program)
- Profit-sharing plan or bonus, based on achievement of targets and results