Senior Threat Intelligence Analyst

About the position

We are looking for a Senior Threat Intelligence Analyst to work on the identification, monitoring, analysis, and mitigation of external threats that could impact the organization, its brand, customers, executives, and digital assets. The professional will be responsible for conducting Brand Protection and Cyber Threat Intelligence (CTI) operations, supporting internal teams in the prevention of and response to threats, frauds, and malicious campaigns targeting the company.

Main Responsibilities

Brand Protection

Monitor, identify, and treat fraudulent assets that improperly use the company's brand.

Perform analyses and takedown processes involving:

Malicious domains;

Fraudulent URLs;

Fake profiles on social networks;

Malicious Apps/APKs;

Fraudulent digital accounts and identities;

Marketplaces and online platforms.

Conduct investigations related to phishing, smishing, vishing, and digital fraud campaigns.

Produce executive and technical reports on brand exposure and identified risks.

Threat Intelligence

Perform Threat Hunting activities based on threat intelligence.

Continuously monitor cybercriminal forums, underground communities, Deep Web, and Dark Web.

Execute collection, analysis, and dissemination activities of strategic, operational, and tactical intelligence.

Correlate threats using frameworks such as MITRE ATT&CK.

Support SOC, Fraud Prevention, Incident Response, and Cyber Defense teams with actionable intelligence.

Produce intelligence reports with high technical quality for different stakeholders.

Identify threat trends, new attack vectors, and movements of malicious actors.

Mandatory Requirements

Knowledge of AWS environment (operation and integration with Lambda, S3, DynamoDB, Secret Manager, API Gateway)

Knowledge of front End (HTML, CSS, and Javascript)

Mastery of the Python language

Proven experience in investigations involving:

Phishing;

Digital frauds;

Fake profiles;

Malicious domains and URLs;

Fraudulent APKs and applications;

Social engineering.

OpSec

Advanced knowledge of:

Threat Actors;

Tactics, Techniques, and Procedures (TTPs);

Digital fraud ecosystem;

Deep Web and Dark Web.

Complex investigations related to hacktivist groups, attack campaigns, and targeted threats.

Experience in Threat Hunting activities and threat monitoring.

Advanced OSINT knowledge.

Knowledge of MITRE ATT&CK, Cyber Kill Chain, and Intelligence Lifecycle.

Advanced English (reading, writing, and conversation).

Excellent analytical and investigative capacity.

Differentials

Intermediate or advanced Spanish.

Certifications related to the area, such as:

CTIA (Certified Threat Intelligence Analyst);

GCTI (GIAC Cyber Threat Intelligence);

Security+.

Experience with Threat Intelligence platforms.

Experience with intelligence automation and enrichment.

Behavioral Competencies

Strong analytical capacity and critical thinking.

Excellent verbal and written communication.

Ability to work under pressure and manage multiple demands simultaneously.

Ease of teamwork and multidisciplinary collaboration.

Investigative profile and problem-solving oriented.

Proactivity and autonomy in conducting activities.

High sense of responsibility and confidentiality.

Education

Completed higher education in: Information Security; Computer Science; Information Systems; Computer Networks; Computer Engineering; Related areas.

Benefits:

Profit Sharing (PLR);

Food and Meal Allowance;

Medical Plan;

Dental Plan;

Daycare/Babysitter Allowance;

Transportation Voucher;

WellHub;

TotalPass;

Employee Assistance Program (EAP);

Optional plans such as Private Pension and Life Insurance;

Pharmacy Discount;

Nutrition Program;

Pregnancy Program;

Extended Maternity and Paternity Leave – Citizen Company.