Cyber Threat Intelligence Analyst

About the Role

Help AG is seeking a Cyber Threat Intelligence Analyst to join the Cyber Defense team in Riyadh, Saudi Arabia. This full-time position is responsible for collecting, analyzing, and disseminating cyber intelligence that impacts the company or its customers. The role requires a professional with 0-1 years of experience in cyber intelligence or cyber risk, demonstrating drive and creativity in delivering equivalent services to organizations.

Key Responsibilities

• Identify, collect, and analyze raw, primary, and secondary data from various sources.
• Create and update General Intelligence Requirements (GIRs), Priority Intelligence Requirements (PIRs), and Organization Specific Intelligence Requirements (OSIRs) for customers.
• Develop threat profiles and threat landscapes for companies and customers.
• Construct diamond models related to customers and threat adversaries.
• Enhance the creation and delivery of intelligence information to customers and partners through various reports and tools, adding value to the service.
• Conduct investigations on the internet and dark web, covering broad topics and specific searches.
• Identify, assess, and track tactics, techniques, and procedures of cyber threat actors.
• Provide threat review and validation to customers regarding their exposure to cybersecurity risks, threats, and potential impact.
• Deliver actionable strategic, technical, and tactical cyber intelligence to the company and its subsidiaries via weekly, monthly, and ad hoc reports, briefings, and presentations.
• Perform internet searches in English and Arabic to profile customers' online presence and optimize data feeds into backend cyber threat harvesting and analysis solutions.
• Apply advanced search techniques (*, Boolean terms) in search engines, social sites, and domain databases to refine results.
• Support customers in takedown efforts to remove fraudulent, offensive, and suspicious online content.
• Maintain current knowledge of attacker tools/techniques, country and regional cyber threats, and business/political landscapes to contextualize detected threats and reduce false positives.
• Provide feedback and recommendations to Backend Cyber Defense teams, such as the MDR Team, to enhance detections and improve portal performance.
• Understand customer industries to generate Arabic keywords for searching online Arabic content.
• Identify new information sources (English and Arabic), search keywords (English and Arabic), and best practices for accurate, customer-related threat detection.
• Assist in defining investigation scope, delivery dates, and presenting findings to customers for ad-hoc investigations.
• Understand and perform Analysis of Competing Hypotheses (ACH) for threat hunting and advisory production.
• Manage the lifecycle of threat intelligence.
• Maintain a high degree of awareness of the current threat landscape.
• Assist in providing threat and vulnerability analysis and security advisory services.
• Participate in knowledge sharing with other Analysts and contribute technical articles to internal knowledge bases.
• Perform tasks independently with some oversight.
• Deliver Cyber Intelligence services.
• Research and craft analytic papers and deliver intelligence briefings under short deadlines on various geographical and functional topics.
• Utilize knowledge, creativity, and analytic tradecraft best practices to solve complex problems.

Work Environment

This position is part of the Cyber Defense team and involves essential duties that may require extended hours during crisis situations and contingency operations. The role is based in Riyadh, Saudi Arabia.

Application Process

Further details regarding the application process will be provided upon interest.