Lead – Threat Intelligence

Job Description:

Preferred key industry certifications such as CEH, CISSP.

• Lead and own projects involving multiple team members and stakeholders to identify, contextualize and assess potential cyber threats in NPCI.
• Help SOC / IR and the business teams to understand global cyber events and mitigate threats associated to NPCI. Lead investigations of cyber threat campaigns and drive recommended actions for NPCI.
• Work with various Threat Intel Providers, banks and governing bodies to identify and address information gaps and with strategic analysts to identify emerging threats and produce relevant reports.
• Collect information used to analyze the economic, social, and behavioral aspects of malicious cyber activity
• Strong knowledge on APT based attacks and emerging trends.
• Research and monitor underground forums, chat channels, and, social media, the identification and analysis of security incidents using open source and internal sources to assess severity and identify responsible parties, including hacktivist groups and actors
• Respond to requests for ad-hoc reporting and research topics from management and security analysts as required
• Identify gaps in available intelligence information and engage with leadership on strategies to meet intelligence requirements through Intelligence collection processes
• Develop daily, weekly, quarterly reports for internal teams
• Knowledge of all-source intelligence,
• Conducting and coordinating threat hunts to identify traces of Any APT Activities or Insider threats in the environment
• Guiding SOC to improvise detection and create use-cases Unveil Infrastructure and Information gaps, and provide recommendations to fix them with either process or technology front.
• Work with various Threat Intel Providers, banks and governing bodies to identify and address information gaps and with strategic analysts to identify emerging threats and produce relevant reports.