דרושים » אבטחת מידע וסייבר » Cyber Threat Intelligence Analyst - French speaker 25042

our company Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution.
We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

our company Infinity External Risk Management, otherwise known as Cyberint, continuously reduces external cyber risk by managing and mitigating an array of external cyber security threats with one unified solution.
We are looking for a Cyber Threat Intelligence Analyst to be an integral part of our Intelligence teams, combining both cutting-edge technology and advanced threat intelligence analysis methodologies to deliver high-impact briefings to our customers.
Key Responsibilities
Learning the customer needs and PIRs, configuring their tailored environments in the ERM intelligence platform and supporting the customers with tuning/training throughout engagement
Monitoring and analyzing threats targeting customers, or issues in their digital exposure, in order to produce actionable intelligence alerts and reports.
Investigating intelligence sources, threat actors, attack tools and techniques
Identifying and developing ERM data sources to collect the most relevant intelligence (darknet, forums, social media, marketplaces, etc.) as well as creating and maintaining avatars on these.
Developing the proprietary intelligence platform by surfacing new modules, capabilities and features
Joining meetings with prospects and clients to present deliverables.
Drive cooperation & feedback loops with other ERM teams.

You will be the only SOC analyst based in Israel, while the rest of the analyst team operates from the Philippines. You will act as the SOCs local anchor - the on-site technical counterpart for the Israel-based Cyber Security, IT, Operations, and R&D teams, and the escalation and knowledge bridge between them and the offshore shifts. The role calls for ownership, independence, and the appetite to build and improve, not only to operate.

Responsibilities

Monitoring and Detection: Continuously monitor SIEM, endpoint protection (EDR), IPS, mail security, CASB, cloud, and identity security solutions to identify potential threats.
Incident Response: Serve as one of the first levels of escalation for security incidents - investigate, contain, and drive resolution before escalating to the senior SecOps members, in accordance with defined procedures and SLAs.
Incident Coordination: Lead coordination of major incidents until ownership is transferred to the relevant SecOps, IT, Operations, or R&D team; ensure clear communication, escalation, and tracking of action items.
Threat Analysis: Analyze logs, network traffic, endpoint telemetry, and native (in-tool) alerts to determine root cause, scope, impact, and remediation steps.
SIEM and Detection Engineering: Own day-to-day operation of the SIEM - data onboarding and ingest pipelines, field mapping and data quality, dashboards and platform health - and write, tune, and maintain detection rules while measuring their effectiveness.
Exclusion and Exception Management: Own the exclusion and exception lifecycle across the security stack: review requests, assess risk, apply scoped, time-bound exclusions, and revalidate them periodically.
Automation and AI-Assisted Operations: Build and maintain automations across the SOC toolchain (enrichment, containment, ticketing, reporting), and design, implement, and validate AI/LLM-based workflows for alert triage, investigation support, and documentation - including guardrails and quality control of AI output.
Investigation Documentation: Create and maintain detailed incident tickets, including investigation audit trail, action items, and timelines.
Technical Leadership: Act as the senior operational reference for the analyst team: help prioritize workload, assure investigation quality, maintain consistent handling of incidents, escalations, and shift handovers, and mentor analysts on tooling and methodology.
Collaboration: Work closely with the Cyber Security team, IT, Operations, and R&D locally, and with the offshore SOC team across time zones.
Continuous Improvement: Drive improvements to detection logic, automation, operational runbooks, and shift handover documentation based on lessons learned from incidents.
Compliance and Reporting: Support reporting for compliance audits, management reviews, and threat intelligence updates.

we are looking for a Senior Cyber Data Analyst.
As a Senior Cyber Data Analyst for the Asset Intelligence Research team, you will conduct research to enhance the asset intelligence platform. You will lead end-to-end research projects, collaborating directly with Product and Development teams to convert technical research into product features. You will analyze large-scale security asset data, automate workflows, and prototype logic to address how enterprise assets are discovered, classified, and trusted. This is a high-impact role where your research directly shapes how our customers manage, prioritize and secure their entire assets inventory.
Responsibilities:
Lead end-to-end research projects focusing on asset data quality, fidelity assessment, enrichment, and correlation across device, identity, software, and SaaS asset types.
Utilize Python, SQL, and AI/LLM tools to build data analysis pipelines, automate asset research, and prototype enrichment and classification logic.
Research and define gating conditions that evaluate assets across three dimensions: Existence, classification, and risk and criticality.
Partner with Product and Engineering teams to transform technical research into production-ready product capabilities.

Required Security Analyst
About the Role:
An industry leader heading into an exciting phase of growth. In this role, you will play an integral part in shaping a new and innovative SaaS product through deep data exploration, detection engineering, core KPI tracking, and actionable insights.
If you are a talented Security Data Analyst passionate about elevating trust, optimizing product performance, and leveraging next-gen technologies to protect customers, we want you on our team!
What youll do:
Build & Fine-Tune Detections: Design, build, and optimize detection rules and risk models to identify emerging fraud vectors while fine-tuning alert thresholds to minimize false positives.
Drive Product & Threat Analytics: Perform Exploratory Data Analysis (EDA), track core product/risk KPIs, and deliver data-driven insights that directly influence product strategy.
Escalation & Optimization: Act as an analytical escalation point for high-stakes enterprise client investigations, providing tailormade analytics to improve detection performance.
Actionable Visualizations: Translate complex data trends into clear dashboards and executive-ready reports that drive action across internal and external stakeholders.
AI & Automation Vision: Configure and deploy AI Agents & Skills within analytical workflows to serve as a key productivity multiplier for the team.
Cross-Functional Collaboration: Partner closely with Product and Analytics teams to support new feature rollouts and strategic decision-making.

Were looking for people who are relentlessly curious and committed to continuous learning. AI is reshaping every function across our business, and we enable every team member, regardless of role or level, to build fluency in AI tools and concepts. Those who thrive here actively seek out new solutions, experiment thoughtfully, and apply what they learn to drive better, faster, smarter outcomes.
As a DFIR Analyst, you will be tasked with delivering rapid, expert breach response for global enterprises facing active cyber threats as part of Digital Forensics and Incident Response (DFIR) team, which operates 24x7x365 on a follow-the-sun model. Working under the direction of an investigation's Technical Lead and Engagement Manager, you will execute hands-on forensic analysis, threat hunting, and investigative work across live incidents spanning endpoint, network, and cloud environments, and incident types from ransomware and business email compromise to identity compromise, zero-day exploitation, APT activity, and cloud/SaaS breaches. This is a foundational technical role built on rigor, where every conclusion must be evidence-backed, every case well-documented, and every finding able to hold up to scrutiny.

The role is responsible for anticipating relevant threats, challenging defenses, identifying exploitable weaknesses, hunting for adversary activity that may evade existing controls, and converting findings into measurable security improvements. 

This is a hands-on leadership position for someone who combines offensive-security depth, threat-led thinking, strong operational judgment, and the ability to influence product, engineering, infrastructure, and security stakeholders. 



Your responsibilities will include:

Pillar strategy and leadership 

Define the Proactive Security strategy, operating model, roadmap, priorities, budget, and success measures in alignment with business objectives and threat profile. 
Build, lead, and develop high-performing Red Team, Penetration Testing, Threat Hunting, and Threat Intelligence teams. 
Create a unified intelligence-led program in which threat intelligence informs testing and hunting, and findings continuously improve defensive controls. 
Prioritize work based on crown jewels, material attack paths, emerging threats, major technology changes, incidents, and business risk. 
Establish clear team charters, engagement models, escalation paths, quality standards, and career-development frameworks. 
Provide the CISO and senior leadership with clear visibility into adversary exposure, validated weaknesses, emerging threats, and remediation progress. 
Red Team and adversary emulation 

Lead realistic, intelligence-led adversary simulations across cloud, identity, applications, infrastructure, endpoints, networks, and operational processes. 
Design campaigns that evaluate prevention, detection, response, escalation, and recovery capabilities against relevant threat scenarios. 
Develop and maintain adversary-emulation plans mapped to relevant threat actors, tactics, techniques, and procedures. 
Ensure every engagement operates under documented authorization, rules of engagement, safety controls, deconfliction procedures, and evidence-handling requirements. 
Deliver concise technical and executive reporting that explains demonstrated impact, attack paths, root causes, and prioritized improvements. 

Are you an innovative security researcher with a deep understanding of Linux systems and a passion for protecting modern environments? Do you want to lead the charge in securing enterprise networks against the latest threats?
We're looking for a skilled professional to join our team, focusing on the critical and rapidly evolving fields of Linux Security. You'll be a foundational member of a new and growing team dedicated to the blue ocean of detection, developing multiple new capabilities within the largest cybersecurity enterprise in the world.
This is a unique opportunity to apply your expertise and influence the future of threat prevention-helping us build cutting-edge security solutions from the ground up.
Key Responsibilitie
Play a pivotal role in shaping the future of our security solutions.
Enhance product effectiveness by designing advanced protection components and developing sophisticated detection rules.
Research Linux OS internals, virtualized environments, and malware behaviors to inform and strengthen our attack prevention mechanisms.
Apply advanced AI and big data approaches to investigate and analyze large-scale datasets across our client base.
Lead research on novel protection concepts and bring them to production-grade quality, serving as a subject matter expert.
Stay up to date with the latest attacker methodologies, APT campaigns, and TTPs targeting Linux systems.
Conduct static and dynamic reverse engineering of Linux malware to uncover new techniques and develop mitigation strategies.
Collaborate closely with engineering, product management, and other research teams to translate research findings into production features.

Act as a Customer Security Advisor, conducting threat-hunting activities and performing security assessments on customer networks. Effectively communicate findings, recommendations for remediation, and mitigation strategies to customers
Serve as an escalation point for the SOC analysts, assisting in the investigation, analysis, and response to security incidents
Develop cyber kill-chain indicators of an attack and hunting heuristics to enhance the ongoing threat-hunting process
Enhance the product accuracy and its capacity to detect emerging threats within the dynamic security landscape

we are seeking a deeply experienced Security Analyst - Tier 3 for its Security Operations Center (SOC). This role is a senior individual-contributor position, leading challenging investigations, setting the standards the SOC operates by. This role reports to the SOC Manager, under the Detection and Response function within the CISO Office.

Your responsibilities will include:

Lead complex, multi-stage, multi-domain investigations end to end, from scoping through deep technical analysis to a clear determination of impact and root cause.
Serve as the SOC's senior escalation point and the quality gate for investigations across the team.
Support the Incident Response team during confirmed incidents with continued telemetry investigation, scoping, and analytical depth.
Continuously sharpen how the SOC investigates, identifying gaps in methods, runbooks, and tooling through daily casework and turning them into concrete improvements.
Mentor Tier 1 and Tier 2 analysts through case reviews, coaching, and pairing during investigations.
Partner with Security Engineering, Platform Security, Threat Intelligence, SOC Automation, and additional teams to turn what the SOC learns into stronger detection and response across .
Participate in readiness activities - tabletops, post-incident reviews, and purple-team engagements.
Participate in the on-call rotation as the senior point of contact outside business hours.