Vice President, Cyber Operations Engineer
Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. Apply your passion and knowledge of cyber security to assist in the investigation of incidents. The Senior Cyber Threat Intelligence Analyst needs to demonstrate thoughtful knowledge of the evolving cyber threat landscape, BlackRock's threat surface, and viable defensive courses of actions to drive threat-informed defense. More specifically, the Senior Cyber Threat Intelligence Analyst will support the global Cyber Operations function and have the following key responsibilities:
- Investigate raw telemetry, potential malicious activity, and confirmed threat detections to identify threats, provide context, and inform decisions about detection and response.
- Identify patterns and trends in detections and write actionable Intelligence Insights about trends we are observing, how customers can respond to them, and why they are relevant.
- Perform open and closed source research to associate suspicious activities and confirmed threats we observe to known threats. Sources include social media, blog posts, intelligence reports, sandbox output, private information sharing partners, internal detections, and more.
- Create and update Intelligence Profiles on threats to effectively track known TTPs, detection coverage, and response/mitigation recommendations associated with specific malware and activity clusters.
- Conduct analysis to identify unique or emerging threat behaviors that the Detection Engineering team can leverage to create new detection analytics.
- Serve as a mentor and teacher to those wanting to learn more about intelligence analysis.
- Suggest new methods, processes, collection sources, and products that the team could adopt to help us achieve our mission and improve our workflows.
BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.
What the ideal candidate looks like:
- 4-7 years of relevant experience.
- 3+ years of operational experience using MITRE ATT&CK.
- Experience working in a Security Operations Center (SOC), Digital Forensics and Incident Response (DFIR), or other security focused roles.
- Experience in activity clustering and the Diamond Model of Intrusion Analysis.
- Consistently demonstrates clear and concise written and verbal communication.
- Proven analytical skills.
- Team player that is comfortable working in a fast-paced environment.
- University Degree. MBA, CISSP, CISM, GCHI, GCTI, CEH, CCNA, or GIAC are preferred.
- Intermediate knowledge in system security architecture and security solutions – IDS, Splunk, data loss prevention, next generation anti-malware, etc.
- Intermediate knowledge of networking fundamentals (TCP/IP, Network Layers, etc.).
- Strong organizational skills.
- Integrity and the highest ethical standards.
- Rapidly assimilates complex data and information and displays a developed learning agility.
- Self-starter with the personal drive to achieve superior performance.
- Courage of convictions and the ability to respectfully debate the status quo.
- Natural curiosity and desire to always learn.
About this role
Overview
Join our global team of cyber security experts, protecting our business and developing exciting capabilities on the frontline of cyber defense. Apply your passion and knowledge of cyber security to assist in the investigation of incidents. The Senior Cyber Threat Intelligence Analyst needs to demonstrate thoughtful knowledge of the evolving cyber threat landscape, BlackRock's threat surface, and viable defensive courses of actions to drive threat-informed defense. More specifically, the Senior Cyber Threat Intelligence Analyst will support the global Cyber Operations function and have the following key responsibilities:
- Investigate raw telemetry, potential malicious activity, and confirmed threat detections to identify threats, provide context, and inform decisions about detection and response.
- Identify patterns and trends in detections and write actionable Intelligence Insights about trends we are observing, how customers can respond to them, and why they are relevant.
- Perform open and closed source research to associate suspicious activities and confirmed threats we observe to known threats. Sources include social media, blog posts, intelligence reports, sandbox output, private information sharing partners, internal detections, and more.
- Create and update Intelligence Profiles on threats to effectively track known TTPs, detection coverage, and response/mitigation recommendations associated with specific malware and activity clusters.
- Conduct analysis to identify unique or emerging threat behaviors that the Detection Engineering team can leverage to create new detection analytics.
- Serve as a mentor and teacher to those wanting to learn more about intelligence analysis.
- Suggest new methods, processes, collection sources, and products that the team could adopt to help us achieve our mission and improve our workflows.
BlackRock is committed to building great Cyber Security careers for our people, and we are looking for an individual with a passion for cyber security defense to continue the growth of our exceptional team.
What the ideal candidate looks like:
- 4-7 years of relevant experience.
- 3+ years of operational experience using MITRE ATT&CK.
- Experience working in a Security Operations Center (SOC), Digital Forensics and Incident Response (DFIR), or other security focused roles.
- Experience in activity clustering and the Diamond Model of Intrusion Analysis.
- Consistently demonstrates clear and concise written and verbal communication.
- Proven analytical skills.
- Team player that is comfortable working in a fast-paced environment.
- University Degree. MBA, CISSP, CISM, GCHI, GCTI, CEH, CCNA, or GIAC are preferred.
- Intermediate knowledge in system security architecture and security solutions – IDS, Splunk, data loss prevention, next generation anti-malware, etc.
- Intermediate knowledge of networking fundamentals (TCP/IP, Network Layers, etc.).
- Strong organizational skills.
- Integrity and the highest ethical standards.
- Rapidly assimilates complex data and information and displays a developed learning agility.
- Self-starter with the personal drive to achieve superior performance.
- Courage of convictions and the ability to respectfully debate the status quo.
- Natural curiosity and desire to always learn.
#J-18808-Ljbffr