OCBC

Cyber Threat Intelligence Analyst

OCBC
BankingOCBC SingaporeOnsitePosted 4 weeks ago

About the role

The Cyber Threat Intelligence Analyst monitors and analyzes global cyber threats to protect company intellectual property and manufacturing infrastructure. The role involves conducting deep-dive analysis on threat actors and providing actionable intelligence to improve the organization's security posture.

BankingOnsite

Key Responsibilities

  • Monitor the global threat landscape for activities targeting the semiconductor industry and manufacturing operations
  • Conduct deep-dive research into threat actors, campaigns, and vulnerabilities relevant to company assets
  • Produce actionable intelligence reports for technical teams and strategic summaries for leadership
  • Curate and maintain Threat Intelligence Platforms (TIP) and automated data feeds
  • Collaborate with the Incident Response and SOC teams to provide context during security events
  • Analyze indicators of compromise (IOCs) and perform tactical malware analysis
  • Participate in external information-sharing communities and ISACs to gather and share threat data
  • Develop and refine threat hunting queries based on newly identified tactics, techniques, and procedures

Requirements

  • Bachelor's degree in Computer Science, Cybersecurity, or a related technical field
  • Minimum of 3 years of experience in cyber threat intelligence, security operations, or incident response
  • Advanced understanding of the MITRE ATT&CK framework and the Cyber Kill Chain
  • Proficiency in utilizing SIEM and EDR solutions for threat detection and analysis
  • Experience with scripting languages such as Python or PowerShell for automating data collection
  • Strong knowledge of network protocols and enterprise security architecture
  • Ability to analyze complex datasets to identify patterns and trends in malicious behavior
  • Excellent technical writing and communication skills for delivering intelligence briefings
  • Familiarity with OSINT collection tools and deep/dark web monitoring platforms
  • Professional certifications such as GCTI, CISSP, or GCIH are highly desirable