Cyber Threat Intelligence (CTI) Analyst
级别：高级/专家 我们正在寻找一个位于希腊的高度熟练的网络威胁情报分析师 (CTI) 来加入我们的威胁情报团队。理想候选人是技术强大，分析严格和深入了解对手交易。这个角色不仅超越监控传输。你将分析对方行为，相关多源情报，地图活动与 MITRE ATT&CK,并产生可操作的情报，驱动检测工程，事件响应和战略安全决策。你将在分析，检测工程和敌人的模拟交叉处运作。责任 · 战略和战术情报 ·分析威胁行为者活动，运动，恶意软件家族和 TP 进化。·为 SOC,IR 和领导层制作可操作的情报报告。·进行威胁景观评估和特定部门风险分析。·追踪并配置 APT 群体，有资金动机的参与者以及新兴威胁。·技术分析。·提取和相关联国际电脑组 （域名，IPs,哈希，基础设施模式）. ·将敌人技术映射到 MITRE ATT&CK. ·分析恶意软硬件行为的报告和沙盒输出。·审查 PCAP,日志和远程测量以识别模式和异常情况。·支持检测规则开发 （Sigma,YARA,Splunk,EDR 问题）. ·智能与自动工程). ·与 STIX/TAXII 传输和威胁情报平台合作。·协助自动化摄入，正常化和相关性管道。· 贡献智能评分模型 （风险评分，演员信心，利用成熟度）. ·通过内部远程测量和蜂蜜机数据验证智能信息 （如有所需）. · 跨团队协作。· 在积极调查期间支持 SOC. · 在事件响应过程中提供对手见解。· 促进紫色团队练习和威胁模拟场景。· 向技术和执行方提出发现。要求的技术技能 · 深了解：· 对手 TTPs · 杀死链 & MITT&CK 框架 ·国际奥委会生命周期和丰富技术 · 经验：·威胁智能平台 (TIPs) ·恶意软件分析报告 ·日志分析 （Splunk,ELK 等）· OSINT 收集技术 · 了解：· STIX/TAXII · YARA / Sigma 规则创建 ·网络协议与流量分析 · Windows & Linux 安全远程测量 · 数据处理的脚本能力 （Python 优先）
查看英文原文
Level: Senior / Expert
We are seeking a highly skilled Cyber Threat Intelligence (CTI) Analyst based in Greece to join our Threat Intelligence team.
The ideal candidate is technically strong, analytically rigorous, and deeply familiar with adversary tradecraft. This role goes beyond monitoring feeds. You will analyze adversary behavior, correlate multi-source intelligence, map activity to MITRE ATT&CK, and produce actionable intelligence that drives detection engineering, incident response, and strategic security decisions. You will operate at the intersection of intelligence analysis, detection engineering, and adversary emulation.
Responsibilities
- Strategic & Tactical Intelligence
- Analyze threat actor activity, campaigns, malware families, and TTP evolution.
- Produce actionable intelligence reports for SOC, IR, and leadership.
- Conduct threat landscape assessments and sector-specific risk analysis.
- Track and profile APT groups, financially motivated actors, and emerging threats.
- Technical Analysis
- Extract and correlate IOCs (domains, IPs, hashes, infrastructure patterns).
- Map adversary techniques to MITRE ATT&CK.
- Analyze malware behavior reports and sandbox outputs.
- Review PCAPs, logs, and telemetry to identify patterns and anomalies.
- Support detection rule development (Sigma, YARA, Splunk, EDR queries).
- Intelligence Engineering & Automation
- Work with STIX/TAXII feeds and threat intelligence platforms.
- Assist in automation of ingestion, normalization, and correlation pipelines.
- Contribute to intelligence scoring models (risk scoring, actor confidence, exploit maturity).
- Validate intelligence through internal telemetry and honeypot data (if applicable).
- Cross-Team Collaboration
- Support SOC during active investigations.
- Provide adversary insights during incident response.
- Contribute to purple-team exercises and threat emulation scenarios.
- Present findings to technical and executive stakeholders.
Required Technical Skills
- Strong understanding of:
- Adversary TTPs
- Kill Chain & MITRE ATT&CK framework
- IOC lifecycle & enrichment techniques
- Experience with:
- Threat Intelligence Platforms (TIPs)
- Malware analysis reports
- Log analysis (Splunk, ELK, etc.)
- OSINT collection techniques
- Knowledge of:
- STIX/TAXII
- YARA / Sigma rule creation
- Network protocols & traffic analysis
- Windows & Linux security telemetry
- Scripting capability (Python preferred) for data processing and automation.
Preferred / Advanced Qualifications
- Experience tracking specific threat actors (APT28, Lazarus, FIN7, etc.)
- Familiarity with exploit development trends and CVE weaponization timelines
- Experience with honeypots and telemetry-driven intelligence
- Understanding of ransomware ecosystems & initial access brokers
- Knowledge of ML-assisted threat detection (bonus)
Analytical & Soft Skills
- Strong hypothesis-driven analytical thinking
- Ability to differentiate noise from signal
- Clear technical writing skills
- Ability to brief senior leadership concisely
- Operational security awareness
Nice to Have Certifications
- GIAC (GCTI, GCIA, GCED)
- OSCP / OSCE
- CISSP
- SANS CTI-related certifications
Benefits
- Highly competitive salary reviewed upwards on a regular basis.
- Working from home: Hit your goals from the comfort of your home because we value performance, not the place.
- Participation in state-of-the-art project and tech challenges and participation in large-scale projects.
- Personal and professional development, amongst industry experts and talented people.
- Continuous learning, having access to board resources.
- Onboarding plan and training so that you have a smooth induction and feel confident and ready to take over your new role.
- Equipment support so you have all the tools to do effectively and efficiently your work.
- No dress code as we want you to be as comfortable as possible.
At AI2CYBER, we are a cybersecurity firm dedicated to providing cutting-edge solutions to protect businesses and individuals from evolving cyber threats. Our mission is to empower organisations to navigate the complex cybersecurity landscape with confidence. We believe that by combining robust security solutions, continuous improvement, and a proactive mindset, we can help our clients stay one step ahead of cyber attackers. We are committed to building a safer digital world and are passionate about making a positive impact in the industry.
This is a full-time position with competitive salary and benefits. If you have a passion for cyber threat intelligence and are looking for an exciting opportunity to work with cutting-edge technology, we would love to hear from you!
Note: All applications will be treated with strict confidentiality.
To apply, please send us your CV at
Requirements
This position in available onlyfor Greek residents.
Originally posted on Himalayas