Cyber Threat Intelligence

Job descriptionSome careers shine brighter than others If youre looking for a career that will help you stand out join HSBC and fulfil your potential Whether you want a career that could take you to the top or simply take you in an exciting new direction HSBC offers opportunities support and rewards that will take you further HSBC is one of the largest banking and financial services organizations in the world with operations in 64 countries and territories We aim to be where the growth is enabling businesses to thrive and economies to prosper and ultimately helping people to fulfil their hopes and realize their ambitions We are currently seeking an experienced professional to join our team in the role of Cyber Threat Intelligence Lead AnalystIn this role you will Hunting for malicious infrastructure IPs domains hashes following the technical analysis of threat actor tactics techniques and procedures Continually identifying data sources and methods to enhance and enrich the collection of malicious infrastructure Developing processes and engaging in adversary engagement to maintain a proactive posture against cyber threats Producing documentation on threat actor tactics techniques and procedures Documenting and presenting technical findings and analysis to internal and external stakeholders As a member of the broader CITA team you will be assisting with and or responsible for Monitoring the global cyber threat landscape through open-source channels raw-commercial datasets participation in industry government information sharing organizations platforms and cultivated personal relationships Supporting the maintenance of a global capability for collection that considers market and business requirements and fully leverages the HSBC global footprint around location culture language and proximity to high value partners Participating in information sharing efforts across the industry that helps to drive a positive image of the bank with our peers and regulators in the markets we serve Participation in and support of external active engagements with industry partners law enforcement and the wider security community that projects HSBC expertise in protecting the bank and its customers against systemic threats Supporting a self-critical culture whereby identification of weaknesses in the bank s control plane people process and technology are brought to light in an effective manner and addressed Supporting a culture of individual self-improvement whereby staff are expected to maintain subject matter expertise within their area of focus and within the realm of cybersecurity more broadly Advise HSBC leadership on the latest trends in cyber intelligence and best practices through close collaboration and engagement with industry academia and government Production of Management Information related to the Cyber Intelligence and Threat Analysis mission that is appropriate to the target audience supported by data and experienced analysis enabling informed decisions RequirementsIn this role you should meet the following requirements Ability to speak read and write in English Excellent investigative skills Instinctive and creative with an ability to think like the adversary Knowledge of hacker culture TTPs and aligning information to MITRE ATT CK An external peer network for sharing intelligence Highest ethical standards and values Knowledge of intelligence analysis principles either through formal education training or equivalent professional experience Experience in identifying and responding to advanced attacker methodologies both within a corporate environment as well as external attack infrastructures ideally with offensive experience and or deception environment development tripwire systems honeypots honey token accounts etc using open source vendor purchased and bespoke in-house developed solutions Excellent communication and interpersonal skills with the ability to produce clear and concise technical reports for targeted audiences across internal and external stakeholders Ability to collaborate across industry academia and government to solve complex cyber security problems Experience conducing public presentations on complex cyber threat topics for customers executives financial sector employees and external audiences Experience with various computer programming scripting and pattern matching languages e g Python JavaScript Yara etc Knowledge of reverse engineering malware utilizing both dynamic and static analysis tools Experience with utilizing well known raw threat data sets and their application programming interfaces APIs to hunt for threats including post exploitation frameworks Knowledge and experience of common intelligence sharing protocols and experience operating within a collective defense environment with internal stakeholders and external partners Knowledge and experience in analysis and dissecting advanced attacker tactics techniques and procedures that informs adjustments to the cybersecurity control plane Youll achieve more when you join HSBC www hsbc com careersHSBC is committed to building a culture where all employees are valued respected and opinions count We take pride in providing a workplace that fosters continuous professional development flexible working and opportunities to grow within an inclusive and diverse environment Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement which is available on our website Issued by HSBC Software Development India