Associate Cyber Threat Intelligence Analyst

Details

The Cyber Security Operations Center (CSOC) works to understand organizational cyber threats, develop detection instrumentation, and monitor events 24x7 for suspicious activity. The CSOC proactively uses current threat trends to build relevant detections and contextual understanding, responds to incidents, and works closely with Engineering, Legal, Compliance, Investigations, and other teams. This role is part of the Cyber Threat Intelligence Team (CTI) within the Threat Hunting, Intelligence and Response (THIR) program.

THIR intelligence analysts provide context, perspective, and analysis on threat actors, current activity, emerging trends, and tactics, techniques, and procedures. They research espionage and cybercriminal threat actors, support security analysis, threat hunting, incident response, and vulnerability management, and produce timely, accurate, analytically rigorous, and actionable intelligence.

Responsibilities

• Leverage open-source intelligence (OSINT), vendor-based intelligence, and private intelligence sources.
• Process intelligence-based reporting and threat feeds daily.
• Conduct focused research and analysis on specific threats and threat actors.
• Perform threat hunts based on intelligence reporting and in support of incident response.
• Transform raw intelligence and knowledge into tangible intelligence products.
• Maintain current knowledge of cybersecurity threats and trends.
• Develop an understanding of the broader security of the organization’s environment.
• Work with colleagues at varying levels of seniority to address cybersecurity threats.
• Generate ideas for continuous improvement, including the conceptual design of new threat scenarios.
• Write high-quality reports for different audiences and present findings and research to audiences outside the security organization.
• Work on an ad hoc basis to support organizational needs.

Requirements

• Excellent written and verbal communication skills.
• Knowledge of common computer network exploitation (CNE) and computer network attack (CNA) techniques.
• Basic understanding of tactical and operational intelligence analysis.
• Familiarity with cyber threat actors, attack vectors, techniques, malware types and families, attack tools, campaigns, espionage actors, and cybercrime actors.
• Knowledge of technical analytical processes and available toolsets.
• Familiarity with file analytics, including Microsoft Office documents, PDFs, and Rich Text Files.
• Familiarity with behavioral malware analysis tools and techniques.
• Familiarity with Linux, Windows, and macOS at the system and userland levels.
• Ability to specialize in areas of expertise, process complex data, and identify patterns and behaviors across large datasets.
• Experience or interest in programming languages such as C, C++, Python, and Unix Shell.
• Experience with static and dynamic malware analysis tools and techniques.
• Experience with memory analysis and disk forensics.
• Knowledge of vulnerabilities and exploits.
• Ability to work in a fast-paced environment where priorities shift regularly and deadlines may be shortened.
• Bachelor of Arts or Bachelor of Science degree.

Benefits

Benefits may include merit increases, incentive compensation for exempt roles, paid holidays, paid time off, medical, dental, vision, short- and long-term disability benefits, 401(k) matching, life insurance, and wellness programs. Bloomberg is an equal opportunities employer and values diversity.

The salary range is USD 125,000–170,000 annually, plus benefits and bonus. Actual compensation may vary based on geographic location, work experience, market conditions, education, training, and skill level.