About SecurityScorecard:
SecurityScorecard is the global leader in cybersecurity ratings, with over 12 million companies continuously rated, operating in 64 countries. Founded in 2013 by security and risk experts Dr. Alex Yampolskiy and Sam Kassoumeh and funded by world-class investors, SecurityScorecard’s patented rating technology is used by over 25,000 organizations for self-monitoring, third-party risk management, board reporting, and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their digital footprint. Headquartered in New York City, our culture has been recognized by Inc Magazine as a "Best Workplace,” by Crain’s NY as a "Best Places to Work in NYC," and as one of the 10 hottest SaaS startups in New York for two years in a row.
Most recently, SecurityScorecard was named to Fast Company’s annual list of theWorld’s Most Innovative Companies for 2023 and to the Achievers 50 Most Engaged Workplaces in 2023 award recognizing “forward-thinking employers for their unwavering commitment to employee engagement.” SecurityScorecard is proud to be funded by world-class investors including Silver Lake Waterman, Moody’s, Sequoia Capital, GV and Riverwood Capital.
About the Role:
The Investigations & Analysis team is at the forefront of tracking and identifying advanced cyber threat campaigns (criminal and nation state). This team is responsible for collecting and analyzing intelligence at scale and translating that intelligence into actionable insight, being data signals that will feed the SecurityScorecard platform. The team will also act as subject matter experts for advanced threats in blogs, research and conferences.As a Senior Intelligence Analyst, you will be required to perform all source intelligence analysis in support of collection requirements.
You will be part of the investigations & analysis team focusing on advanced threats and translating those threats into actionable insight. The role has a focus on tracking cyber threat campaigns and translating actor Technique, Tactics & Procedures (TTPs) into actionable signals. The team is a diverse set of individuals supporting the intelligence mission of SecurityScoreCard, you will be somebody who is results oriented, has a strong attention to detail and an overall team player.
You will:
- Conduct investigations into nation state and organized cyber-criminal activity with a focus on identifying new types of signals
- Assess the capabilities of threat actors and identify new methods for tracking and identification of new activity through Open Source and Private Source intelligence feeds
- Translate actor TTPs into actionable insight (novel signals) that drive continuous product improvements
- Work with leadership to define intelligence requirements and collaborate with the Signals Collection team to implement collections automation
Basic Qualifications
- 5 years experience with cyber threat intelligence
- Experience in tracking nation state and cyber-criminal groups
- Working knowledge of malware, vulnerabilities, exploits and networking protocols
- Familiar with the MITRE AT&CK framework
Additional Qualifications
- Knowledge of intelligence industry standards (intelligence life cycle, analysis of competing hypothesis, diamond model)
- Working knowledge of the intelligence community / public sector
- Published work or presented at conferences
- Strong analytical and problem-solving skills
- Must be able to thrive in a fast-past environment
- Strong written and verbal communication skills
Benefits:
Specific to each country, we offer a competitive salary, stock options, Health benefits, and unlimited PTO, parental leave, tuition reimbursements, and much more!The estimated salary range for this position is $135,000-150,000. Actual compensation for the position is based on a variety of factors, including, but not limited to affordability, skills, qualifications and experience, and may vary from the range. In addition to base salary, employees may also be eligible for annual performance-based incentive compensation awards and equity, among other company benefits. SecurityScorecard is committed to Equal Employment Opportunity and embraces diversity.
We believe that our team is strengthened through hiring and retaining employees with diverse backgrounds, skill sets, ideas, and perspectives. We make hiring decisions based on merit and do not discriminate based on race, color, religion, national origin, sex or gender (including pregnancy) gender identity or expression (including transgender status), sexual orientation, age, marital, veteran, disability status or any other protected category in accordance with applicable law. We also consider qualified applicants regardless of criminal histories, in accordance with applicable law.
We are committed to providing reasonable accommodations for qualified individuals with disabilities in our job application procedures. If you need assistance or accommodation due to a disability, please contact talentacquisitionoperations@securityscorecard.io.Any information you submit to SecurityScorecard as part of your application will be processed in accordance with the Company’s privacy policy and applicable law. SecurityScorecard does not accept unsolicited resumes from employment agencies. Please note that we do not provide immigration sponsorship for this position.
