About the role

Threat Intelligence Analyst role analyzing cyber threats and providing strategic recommendations. Working with cybersecurity teams at PwC Canada to safeguard client data and systems.

Responsibilities

Analyze incidents and attribute them to threat types and intrusion sets
Extract intelligence from incident data and malicious code
Identify, prioritize, and report on external cyber threats
Generate, consume, and exploit tactical and operational threat intelligence
Collaborate with cross-functional teams to report findings
Provide structured analysis, prioritization, and reporting of a cyber adversary's intent

Foundational computing principles (e.g., networking, operating systems, and information security concepts)
Threat intelligence platforms (e.g., ThreatQ, OpenCTI, MISP, etc.) and security information and event management (SIEM) platforms (e.g., Splunk, Elastic, etc.)
Malware sandboxes and repositories (e.g., VirusTotal, VMRay, Hybrid Analysis, etc.)
Open-source intelligence (OSINT) collection sources, tools, and analysis
Threat actor tactics, techniques, and procedures (TTPs)
Basic intelligence models (e.g., the Intelligence Lifecycle, intrusion kill chain)
Understanding of malware reverse engineering tools and techniques
Knowledge of forensic analysis tools and techniques
Programming (e.g., C, Python, Golang, Rust, etc.)
Command and control frameworks (e.g., Cobalt Strike, Sliver, etc.)