Threat Intelligence Analyst

_

X’s Threat Disruption team provides expert scaled investigative support into various platform related threats including violations of our platform safety and integrity policies. Our objective is to increase the costs to bad actors for manipulating the platform and mitigate associated harm.
 

Responsibilities: 

• Build heuristic rules to detect and stop bad actors on X, and contribute to building other detection systems and Safety product features.

• Use data analysis to identify signals used by bad actors on X, develop threat actor profiles, and complete scaled investigations into those signals/bad actors.

• Conduct threat modeling to improve threat detection and mitigation.

• Investigate anomalies and scaled threats detected by other Safety or partner teams.

• Perform continuous research based on open source and internal tooling on specific threats, including threat actors and campaigns, to determine detection and enforcement gaps for X Rules and policies. This includes campaign tracking and trending evaluation.

• Work closely with Engineering teams to retroactively remediate on-platform threats and create heuristics to proactively prevent threats from reoccurring. 

• When needed, produce brief bulletins, assessments, or full-length profiles of actors for stakeholders delivered in a timely and contextual manner. 

• Manage external and internal Threat Intelligence partnerships on behalf of X. This includes optimizing and managing data sources of threat intelligence information.
   

Qualifications: 

• Business level competency in both Japanese & English languages

• Bachelor's Degree in Computer Science, Information Assurance, Data Science, Management Information Systems, or equivalent work experience.

• 3+ years Threat Intelligence experience working on relevant issues (safety, security, fraud, and/or content policy), preferably at an internet or technology company.

• Experience conducting analysis on large data sets to identify commonalities and signals that can be used to identify and remediate threats

• Experience creating heuristics to identify and remediate threats (e.g. YARA rules).

• Experience using SQL and relational databases in your work. Ability to use Python, R, or another scripting language to facilitate scaled data analysis.

• Experience working on or knowledge of financial/fraud related threats

• Experience with problem solving and troubleshooting complex issues with an emphasis on root cause analysis.

• Strong interpersonal and communication skills. Must be able to effectively communicate security and threat concepts with both technical and non-technical individuals.

• Works well under pressure, and is comfortable working independently in a fast-paced, ever-changing environment.

• Preferred: Knowledge of Scala and/or Java programming languages.