Cybersecurity Threat Intelligence Analyst

About the position As the world around us becomes more connected and more digital, there are increased opportunities for fraud and disruption due to cybersecurity attacks. The need for companies, products, and services to be secure is more important than ever in this constantly changing landscape. Are you passionate about keeping good people safe from bad actors? We are too! We are HP Cybersecurity and we are tasked with the security of the HP enterprise. As HP continues our digital transformation, the work of the cybersecurity professional is never complete and is always interesting. Come be a part of making a difference with us! The Cybersecurity Threat Intelligence Analyst is charged with advancing our knowledge of adversary intent, opportunity, and capability to cause harm to HP's global business. They are responsible for the collection, analysis, and dissemination of Cyber Threat Intel, enabling both internal Cybersecurity teams to focus prevention and detection efforts as well as enabling the business to better make informed, risk-based decisions.

Responsibilities

• Drive HP's threat intelligence pipeline.
• Collect, process, and operationalize threat intelligence from internal telemetry and external sources.
• Make intelligence actionable. Push curated intelligence into detection, response, and security tooling to make insight become protection automatically.
• Partner with Incident Response analysts during active investigations, providing contextual intelligence, malware analysis, and recommending remediations.
• Deliver intelligence reports, advisories, and presentations to Cybersecurity leadership - translating technical findings into business risk.
• Identify gaps in our processes, tooling and technology to help build the capabilities that take our threat intelligence function to the next level.

Requirements

• 5+ years of experience in one or more of: Cyber Threat Intelligence, Digital Forensics, Incident Response, or a related field
• Hands-on experience implementing and operating a Threat Intelligence Platform to collect, enrich, and distribute indicators across security tooling
• A track record of researching, tracking, and reporting on threat actor tactics, techniques, and procedures (TTPs)
• Strong written and verbal communication skills, with the ability to present confidently to both technical and non-technical audiences
• Experience authoring technical reports — intelligence assessments, advisories, and analysis write-ups — for technical and leadership audiences

Nice-to-haves

• Tool development and scripting experience in Python, Go, PowerShell, or similar
• Prior experience as a threat intelligence analyst embedded in a security operations organization (SOC)
• Hands-on experience with CrowdStrike or a similar EDR platform
• Experience performing malware, network traffic analysis and/or analysis on large data-sets
• A mindset of continuous growth and curiosity — you're the person who keeps asking why?

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Long term/short term disability insurance
• Employee assistance program
• Flexible spending account
• Life insurance
• Generous time off policies, including; 4-12 weeks fully paid parental leave based on tenure
• 11 paid holidays
• Additional flexible paid vacation and sick leave