Cybersecurity Analyst II - Cyber Threat Intel

Description: The Home Depot’s Cyber Threat Intelligence team is looking for a cyber defender, who has the experience and skills to identify threats as they emerge. This role will involve the identification of vulnerabilities, attacker trends, and novel malware. It is critical to think outside of the box to identify threats that could potentially impact one of the largest retailers in North America. Understanding of the OWASP top 10, and the way in which adversaries exploit vulnerabilities is a big plus. This role will support Threat Intelligence Notifications and Operations activities within the Cyber Threat Intelligence team. Ability to compose well written reports and documentation that may be distributed to large parts of the organization. Technical understanding of the vulnerabilities on a variety of technologies. Has a growth mindset, and is interested in learning the basic tools and processes that The Home Depot Cybersecurity department has invested in. Familiarity with intelligence writing and structured analytic techniques such as analysis of competing hypotheses, "Devil's Advocate", and others. An understanding of corporate Information Technology environments. The ability to research and produce large amounts of technical and non-technical data into written and actionable reporting. Cyber Threat Intelligence experience such as familiarity with security researchers, vendors, and open source reporting. Familiar with researching cyber adversary TTPs, IOCs, malware and infrastructure. Familiarity with project planning and process design. Experience working with or willingness to learn the MITRE ATT&CK framework and its applications. Requirements: Previous cybersecurity experience Previous technical reporting experience Familiarity working within or with Security Operation Teams Collaborative Mindset Curious and Open Minded Experience with OSINT research on Threat Actors/Emerging Threats/APT’s Bachelor's Degree in Cybersecurity (or Related Field) Retail Business understanding Familiarity with common threat intelligence subscriptions such as Recorded Future, Domain Tools, Maltego, and Virus Total, Shodan. Familiarity with industry standard frameworks such as Cyber Kill-chain, NIST SP-800-53, MITRE ATT&CK, and D3FEND. Benefits: