MDRP Threat Intelligence Analyst
Rapid7 is looking for a MDRP Threat Intelligence Analyst to join our "Threat Command" team and take our threat intelligence analysis capabilities to the next levels.
About the Team
As a MDRP Threat Intelligence Analyst at Rapid7, you will be responsible for reviewing alert data to identify threat activity in customer environments. You will be empowered to steer investigations, including everything from evidence acquisition and analysis to figuring out how the intrusion began to identify any malicious or unexpected activity related to the event. Your colleague, a Customer Advisor, will be responsible for direct communication with the customer, and you will have fellow analysts who will be ready to help you if you encounter a problem or have a question.
About the Role
In this role, you will:
- Perform monitoring of alerts on areas including phishing and credential harvesting sites, and data leakage, dark web monitoring.
- Write findings for each investigation, which includes your intelligence analyst findings and remediation recommendations for customers.
- Research and implement new tools and data sources to expand analysis on emerging cyber threats.
- Assist the internal analyst team with use case development, query development, and alert tuning.
- Create new standard operating procedures to assist analysts with repeatable daily work.
- Produce intelligence outputs to provide an accurate description of the current threat landscape.
- Communicate with Customer Advisors on client requests for Information and investigation findings.
The skills you'll bring include:
- 1+ Year experience in cyber intelligence or equivalent role with advanced familiarity with cybercrime communities and OSINT sources and tools.
- Experience in investigating threats, utilizing OSINT, HUMINT and other research techniques to uncover threat actors and their TTPs while providing context to threats and reaching conclusions from incomplete or missing data.
- Technical know-how on extracting threat data (IP's, domains, ports, malware, and malicious communications) from multiple sources.
- Business understanding and familiarity with corporate security solutions.
- Excellent interpersonal and teamwork skills.
We know that the best ideas and solutions come from multi-dimensional teams. Teams reflecting a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.
Rapid7 (NASDAQ: RPD) helps organizations across the globe protect what matters most so innovation can thrive in an increasingly connected world. Our comprehensive technology, services, and community-focused research simplify the complex for security teams, helping them reduce vulnerabilities, monitor for malicious behavior, be in 10 places at once, and shut down attacks. We're on a mission to make security solutions easier to use and access so we can bring safety and resilience to more people.
With more than 10,000 customers across 140+ countries, Rapid7 is a leader in cybersecurity that has earned numerous industry accolades and recognition for our technology and culture.
What We Do
We do this by embracing tenacity, passion, and collaboration to challenge what’s possible and drive extraordinary impact.
Here, we’re building a dynamic workplace where everyone can have the career experience of a lifetime. We challenge ourselves to grow to our full potential. We learn from our missteps and celebrate our victories. We come to work every day to push boundaries in cybersecurity and keep our 11,000+ global customers ahead of whatever’s next.
Why Work With Us
What makes us unique is how we embrace, model, and celebrate our core values. By challenging convention, being an advocate, creating impact together, always bringing our full selves, and recognizing that our work is never done, we are able to make an extraordinary impact on our business, our industry, and our own career growth.
Gallery
Rapid7 Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Our default working model is hybrid, with employees working three days per week in the office. This approach underpins our commitment to flexibility and adaptability while supporting our dedication to development, teamwork and customer purpose.