Cyber Threat Intel Analyst

Cyber Threat Intelligence Analyst

Job Status

Full-time

Direct Reports

0

Reports to

Threat Intel and Detection Lead

Amount of Travel

5%

Work Schedule

8 hr. workday

Location

Remote (AU)

Organisation Summary

The Critical Infrastructure Information Sharing and Analysis Centre, Australia (CI-ISAC Australia) is an industry-led, not-for-profit entity that is building towards having thousands of members across Australia. CI-ISAC is focused on sharing cyber threat intelligence (CTI) to build the resiliency of industry owners and operators of the nation's critical infrastructure through the concept of collective defence. The CI-ISAC shares threat and vulnerability intelligence and provides contextualised reporting and central capabilities to support members. Internal capabilities are augmented with both technical products and industry partnerships to ensure our members are armed with the intelligence and capabilities to proactively defend their systems.

The position will serve as a Threat Intelligence Analyst supporting the membership from within the National Intelligence Office (NIO) of CI-ISAC Australia. Intelligence Analysts have a key responsibility to support both the daily operational functioning of the NIO, while also working with CI-ISAC leadership to automate and build all aspects of the technical intelligence roadmap.

Job Description

This role is flexible. We are a small, growing organisation with a few gaps to fill in the intelligence analyst space. Generally, you’ll need to be able to keep an eye on current events, understand what’s happening, and then explain it clearly and effectively to our members, both in writing and in presentations. Strong support is in place to help you get started: the main requirement is being a good analyst. Make sure to give me an analogy about onions to explain your skill level.

When it comes to your application, make sure to write a simple cover letter that addresses this section of the description. We are extremely interested in what you think makes a good analyst. SOC, intel, whatever. We respect that anyone who can effectively articulate this holistically is likely to be able to achieve all of the core functions.

With your experience, hopefully you have done some time in a large corporation with complex compliance obligations, maybe the federal government or similar. This gives you the necessary perspective when it comes to providing actionable recommendations. If you don’t have this, it’s fine, just make sure your cover letter explains your perspective.

As far as the technical components - any experience in SOC work, offensive security, AppSec, secure development etc is fantastic. A personal website, Git repo, Codepen, whatever would do very well for you if you happen to have one – but without it a solid human-written non-AI cover letter is enough.

Core Functions

Cyber threat intelligence skills, critical thinking, independent research, ability to deliver independently in a fully remote AU-based but still geographically dispersed team.

Maintain awareness of and conduct analysis on the latest threat intelligence and cyber campaigns impacting Australia and its CI entities.

Actively contribute to the production of cyber threat intelligence at all stages of the intelligence cycle.

Formulate research and production plans based on the direction provided by team leaders and CI-ISAC information requirements; execute those plans.

Collect and collate information from multiple, diverse sources and assess their reliability, credibility and relevance to the intelligence questions you are trying to answer.

Analyse that information, build insights that may be of operational or strategic importance to members.

Produce timely reports and other products containing those insights, and submit those reports and products to CI-ISAC quality assurance processes.

Disseminate approved products, demonstrating high standards of written and spoken communications skills in dealings with members and other stakeholders.

Be responsive to changing operational imperatives and emerging threats, being prepared to change research and production plans where higher priority tasks arise at the direction of team leaders.

Make all the necessary contributions to support CI-ISAC in meeting its routine reporting and production commitments.

Protect the confidentiality of information you are given access to in your CI-ISAC role.

Education

Higher education is valuable but is not mandatory where experience meets the goals.

Certifications

Security-related certifications are good.

Background and Experience

More than two years of work experience in the field of cyber security

Familiarity with cyber security technologies and practices in different countries, as well as threats to these.

Familiarity with Australian and regional national cyber security programs, supporting organisations, cybercrime and data protection laws, and law enforcement apparatus for combatting cybercrimes is a plus.

Technology Applications and Platforms

Familiar with standard office software platforms, including the Google Workspace suite and Atlassian stack.

Security Clearance

• Current or inactive security clearance preferred.

Full-Remote

Full-Time

Australia-based

8hr workdays

Minimal (~5%) travel

100-120k depending on experience