דרושים » אבטחת מידע וסייבר » Security Analyst בחברת Cyber

Check Point Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution.

We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers

Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams

As a part of our focus to provide the best real-time threat prevention service to our customers, our team works on analyzing current cyber security threats and developing protections within Check Points Threat Prevention products.

Precise intelligence regarding current activity is crucial in order to provide excellent protection from broadly distributed threats, as well as targeted attacks.

The Threat Intelligence Operations (TOC) team is a part of Check Points Research and Intelligence area.

Key Responsibilities
Analyze global cyber activity, based on Check Points sensors, to identify current campaigns and potential detection gaps
Monitor open source intelligence (OSINT), including security blogs, publications, and reports on trends in the threat landscape
Provide technical analyses of malicious files and communications
Address alerts and requests coming from internal field representatives and customers regarding threat coverage, and provide immediate mitigation for active attacks
Develop tools and automated processes for internal use, to improve coverage, speed and efficiency of the teams analyses
Working hours:

To provide continuous analysis & mitigation, some of the work is performed in shifts.

Typical shifts are morning (07:30 - 15:00), afternoon (15:00 - 22:00) and night (22:00 07:30).

Compensation is hourly.