CTI Analyst / Lead - Fortune 500 MNC / Mumbai / MISP Expertise

Role Summary:

CTI Analyst / Lead

The role requires deep understanding of cyber adversary behavior, use of threat intel platforms like MISP, and a strong grasp of MITRE ATT&CK and the Cyber Kill Chain.

Key Responsibilities:

• Conduct threat intelligence gathering and enrichment from open-source and commercial feeds.
• Perform advanced threat hunting using IoCs, TTPs, and behavioral analytics across EDR, SIEM, and SOAR platforms.
• Utilize frameworks like MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain to map and predict adversary movements.
• Investigate suspicious activities and files using sandbox environments and generate intelligence reports.
• Execute vulnerability analysis and provide guidance to patch and mitigate known weaknesses.
• Coordinate blocking of IoCs across endpoints, web proxies, antivirus, and cloud tools.
• Use MISP (Malware Information Sharing Platform) for intelligence sharing, correlation, and operationalization of threat data.
• Contribute to monthly threat reports, KPIs, dashboards, and executive summaries.
• Support continuous improvement of internal detection logic and incident response processes.

Required Skills & Qualifications:

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related fields.
• 3–15 years of relevant experience in cybersecurity analysis, threat intelligence, or cyber defense.
• Strong hands-on experience with:
• SIEM (e.g., QRadar)
• XDR/EDR (e.g., Cortex XDR, CrowdStrike Falcon)
• SOAR (e.g., Demisto)
• Azure Active Directory
• Proficient in MITRE ATT&CK mapping, Cyber Kill Chain, and detection use case development.
• Deep understanding of network protocols, log analysis, malware behavior, and incident response.
• Mandatory experience with MISP for threat intelligence management.
• Scripting or automation experience using Python and tools like Git and VSCode.
• Familiarity with vulnerability scanners like Qualys and threat investigation tools like Trellix, SafeNet is a plus.

Preferred/Bonus Skills:

• Knowledge of containerization (e.g., Docker).
• Familiarity with Pandas (Python library) for data analysis.
• Security certifications like GCTI, CEH, or CTIA (optional but valued)

Soft Skills & Attributes:

• Must be Mumbai-based.
• Excellent analytical and problem-solving skills.
• Clear written and verbal communication.
• Ownership mindset with the ability to work independently and collaboratively.
• Strong prioritization and decision-making capabilities under pressure

Location:

Andheri, Mumbai, Maharashtra