Intelligence Analyst, Google Threat Intelligence Delivery
- linkCopy link
- emailEmail a friend
Minimum qualifications:
- Bachelor's degree or equivalent practical experience.
- 3 years of experience in a customer-facing role in cyber intelligence and cyber operations.
- Experience working with security operations functions such as SOC tier 1/2, Hunt teams, executive managers, Chief Information Security Officer (CISO).
- Experience working in a government or military environment, developing cyber threat intelligence for network, host and log analysis, to enable the detection and response to cyber threats.
- Experience analyzing Indicators of Compromise (IOCs) including sandbox output.
Preferred qualifications:
- Experience in SOC operations, threat hunting, detection engineering and SOC workflow optimization.
- Experience conducting/supporting incident response and investigations within enterprise environments.
- Experience with network Intrusion Detection System (IDS) monitoring, Endpoint Detection and Response (EDR) solutions, SIEM, Security Orchestration, Automation, and Response (SOAR) integration, managing, contributing CTI into threat intelligence platform.
- Understanding of core cyber security concepts, common enterprise IT infrastructure components, operating system internals and networking.
- Eligible to obtain security clearance in Israel as this can be a client requirement.
About the job
Google Threat Intelligence Group's Intel Delivery, through the Special Interest Group (SIG) Israel team, delivers its key service known as Advanced Intelligence Access (AIA).
In this role, being onsite and embedded with a customer several days per week, you will leverage Google's cyber threat intelligence to enable network defenders and customer Cyber Threat Intelligence (CTI) teams to defend against the threats they face. You will be supporting the customer's CTI defensive mission, helping their Security Operations Center (SOC), threat hunters, detection engineers, and CTI analysts counter threats by translating intelligence into actionable hunt methodologies across the customer's systems and data, while guiding and empowering SOC personnel to better understand and operationalize intelligence for their own hunting efforts, ultimately enabling the safe and secure running of their networks and operations.
Responsibilities
- Build an understanding of the customers CTI requirements. Identify their needs and opportunities for deployment of CTI within their operations to have the greatest defensive impact.
- Track, research and contribute CTI analysis within Google Threat Intelligence, of customer's priority threat concerns.
- Enable customer SOC analysts and Hunt teams to deploy and leverage Google's CTI.
- Generate CTI and perform analysis of customer data, taking their bespoke sources to identify threat activity, or to build and automate investigative workflows.
- Support the integration of CTI into customer's security processes and technologies, including Security Information and Event Management (SIEM) and Threat Intelligence Platform (TIP) systems. Write intelligence reporting against customer requirements, appropriate for their intelligence analysts or executive readers.
Information collected and processed as part of your Google Careers profile, and any job applications you choose to submit is subject to Google's Applicant and Candidate Privacy Policy.
Google is proud to be an equal opportunity and affirmative action employer. We are committed to building a workforce that is representative of the users we serve, creating a culture of belonging, and providing an equal employment opportunity regardless of race, creed, color, religion, gender, sexual orientation, gender identity/expression, national origin, disability, age, genetic information, veteran status, marital status, pregnancy or related condition (including breastfeeding), expecting or parents-to-be, criminal histories consistent with legal requirements, or any other basis protected by law. See also Google's EEO Policy, Know your rights: workplace discrimination is illegal, Belonging at Google, and How we hire.
If you have a need that requires accommodation, please let us know by completing our Accommodations for Applicants form.
Google is a global company and, in order to facilitate efficient collaboration and communication globally, English proficiency is a requirement for all roles unless stated otherwise in the job posting.
To all recruitment agencies: Google does not accept agency resumes. Please do not forward resumes to our jobs alias, Google employees, or any other organization location. Google is not responsible for any fees related to unsolicited resumes.