[Remote] Principal, Cyber Intelligence
Note: The job is a remote job and is open to candidates in USA. Surefire Cyber Inc. is redefining the incident response model by delivering a swifter, stronger response to cyber incidents. The Principal, Cyber Intelligence will play a critical role in advancing the company's cyber intelligence capabilities by transforming complex threat data into actionable intelligence and mentoring team members. Responsibilities • Collaborate closely with the CIO, digital forensics, and incident response teams • Work with the CIO, Cyber Advisory, and Response services teams to determine intelligence needs and requirements • Ensure data accuracy and produce daily Cyber Threat Intelligence (CTI) reports • Work with engagement leads and project managers to ensure accurate data collection from Surefire IR cases • Produce well-written actionable reports for stakeholders and clients • Conduct in-depth research, data collection, and analysis on current and emerging cyber threats • Regularly conduct rigorous research, analyze, and correlate time-sensitive intelligence data from multiple data sets, including open-source outlets • Support the Surefire Cyber Response services team in investigations • Analyze threat intelligence alerts and reports on Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs) • Manage multiple high-level and competing priorities • Ensure cyber threat intelligence needs and requests are met in a timely manner • Work closely with the CIO to evaluate current and emerging technologies and techniques • Stay current on best practices for tracking advanced persistent threats • Develop well-informed solutions and maintain awareness of identified patterns of tracked activity threats • Create, maintain, and enhance a solution for cyber threat intelligence dashboards, reports, and metrics • Interpret findings and proactively communicate threat awareness to stakeholders • Translate technical and non-technical intelligence data to produce reports/publications • Deliver presentations on the importance of cyber threat intelligence findings, including relevant information on threat groups to diverse audiences such as internal stakeholders and clients Skills • Bachelor's degree in a relevant field (cybersecurity, computer science, information security) or comparable real-world experience • Proven success in analytical, intelligence, or security-focused roles such as Cyber Threat Intelligence Analyst, Forensic Analyst, Security Engineer, Cybersecurity Consultant, or related positions • Previous experience in working in a cybersecurity organization, or professional services firm in a client-facing role • In-depth knowledge of cybercrime and the cybersecurity incident response lifecycle • Up to date on the latest research and trends in the cyber threat landscape, and familiarity with reporting from cybersecurity researchers, vendors, and open-source outlets • Experience in deploying and analyzing data from technical security controls, including web proxy, firewalls, IPS, IDS (Intrusion Detection System), mail content scanning tools, antivirus solutions, network analyzers, and other host-based protection solutions • Experience reviewing the attack surface of organizations to produce actionable intelligence including the use of dark web personas • Experience with data analysis, data visualization, and/or business intelligence software • Strong problem-solving abilities with an investigative and collaborative mindset • Excellent communication (written, verbal, presentation) and experience in composing well-written reports/publications, and documentation Benefits • Competitive compensation plan and total rewards package for team members. • Remote workforce. • Generous paid time off plan and floating holidays. • Paid parental leave. • Employer paid premiums for both team members and their dependents for medical, dental, and vision. • Comprehensive health, vision, dental, 401K matching program, disability, Flexible Spending Accounts (FSA), Health Savings Account (HSA), Life and AD&D benefits. • Professional development and career advancement opportunities. • We prioritize employee growth and development through a robust performance management platform to provide ongoing coaching, clear feedback, recognition, and opportunities for career growth. Company Overview • Surefire Cyber delivers swift, strong response to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats with end-to-end response capabilities. It was founded in 2022, and is headquartered in Elkridge, Maryland, USA, with a workforce of 11-50 employees. Its website is Apply tot his job