Senior Threat Analyst, Partnership Program Office (Ukrainian)

About the job

The aim of the Partnership Program Office (PPO) is to create and manage a dynamic and scalable partnership ecosystem that enhances the Google Threat Intelligence Group's (GTIG) data, capabilities, and resources through collaboration, innovative solutions, focused delivery, and successful execution.

Mandiant Threat Intelligence Services' Advanced Intelligence Access (AIA) is Google Threat Intelligence Group's (GTIG) premium cyber threat intelligence subscription, offering customers access to a wide range of GTIG data, tooling, and expertise via a dedicated Mandiant Security Consultant. AIA is tailored to the needs of each customer, allowing for improved integration and outcomes.

As Senior Threat Analyst, you will grow in using data to solve complex analytic problems and excel at delivering results. You will be a trusted advisor, providing clients with direct access to GTIG's comprehensive threat intelligence, including raw data. Your expertise will empower clients to make informed decisions and take decisive action, ensuring their security and operational resilience.

In this client-facing role, you will also serve as a bridge to GTIG's vast network of cybersecurity, threat intelligence, and information operations professionals. You will utilize familiarity with governmental objectives and excel at prioritizing tasks effectively, demonstrating measurable impact, and communicating professionally.

Responsibilities

• Embed within the customer’s organization to track and analyze cyber threat intelligence (CTI) requirements. Research priority threats using Google Threat Intelligence (GTI) and brief executives and security teams on trends, motivations, and technical TTPs.
• Integrate GTI and technical resources into SIEM/TIP systems. Empower SOC, hunt, and detection teams to leverage Google's intelligence.
• Analyze adversarial threats to support advanced attribution aligned to the customer's priorities. Utilize customer data and GTI to identify threat activity, build automated analytical workflows, and curate threat data for detection operations.
• Author intelligence reporting against customer requirements, appropriate for various stakeholders and audiences.

Minimum qualifications:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience assessing and developing cybersecurity solutions and programs across security domains.
• 5 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.
• Experience operationalizing Cyber Threat Intelligence (CTI) methodologies and applications.

Preferred qualifications:

• Experience as an all-source, open-source, or threat intelligence analyst leveraging technical collection.
• Experience engaging with and presenting technical findings to executive stakeholders.
• Experience applying threat intelligence methodologies inside an intelligence environment to support internal and external stakeholders.
• Experience with structured analytic techniques and models for threat intelligence.
• Experience with MITRE ATT&CK, STIX, and network logging formats.
• Ability to communicate in Ukrainian fluently to support client relationship management in this region.

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, related technical field, or equivalent practical experience.
• 5 years of experience assessing and developing cybersecurity solutions and programs across security domains.
• 5 years of experience in delivering cyber outcomes, identifying mission risks, and devising solutions.
• Experience operationalizing Cyber Threat Intelligence (CTI) methodologies and applications.