Associate Cyber Threat Intelligence Analyst

The Cyber Security Operations Center (CSOC) works to understand the cyber threats we face as an organization, develops instrumentation for detection and monitors events 24x7 looking for suspicious activity. We proactively learn from current trends to build relevant detections and contextual understanding into the program. We strive to monitor meaningful security events around the clock, respond quickly, but always favor quality over speed. If an Incident occurs, we are prepared to engage appropriate stakeholders and take required actions as needed. The CSOC department reports into the CISO, and we work closely with Engineering, Legal, Compliance, Investigations and many others across the organization to help unify security event monitoring and incident response. Our colleagues depend on us to be incident response pros that have a deep understanding of IT networks and systems. On any given day, the department may analyze cyber security events, hunt for suspicious activity, research and disseminate threat intelligence, identify improvement opportunities for detection rules, improve procedures and train analysts. This associate Threat Intelligence Analyst role is part of our Cyber Threat Intelligence Team (CTI) within the larger Threat Hunting, Intelligence and Response (THIR) program. 

What we do 

THIR intelligence analysts provide context, perspective, and analysis on threat actors, current activity, emerging trends, and tactics, techniques, and procedures. Through research and detailed analysis, they produce in-depth coverage of espionage and cybercriminal threat actors relevant to Bloomberg. They support teams across Bloomberg’s information security program, including CSOC Security Analysis, threat hunting, incident response, and vulnerability management. We are trusted to deliver timely, accurate intelligence that is appropriately detailed, analytically rigorous, and actionable for each audience. 

We’ll trust you to: 

Leverage Open-Source Intelligence (OSINT), vendor-based and private intelligence sources 

Perform daily processing of intelligence-based reporting and threat feeds 

Conduct focused research and analysis on specific threats and threat actors 

Perform threat hunts based on intelligence reporting and in support of incident response 

Transform raw intelligence information and knowledge into tangible products 

Demonstrate a passion and good judgment as a Threat Intelligence professional 

Learn and understand the broader security of Bloomberg’s environment 

Remain up-to-date with cyber security threats and trends 

Work with varying seniority levels throughout Bloomberg to address cyber security threats 

Generate ideas for continued improvement, including conceptual design of new threat scenarios 

You’ll need to have: 

Excellent written and verbal communication skills 

Knowledge of common computer network exploitation (CNE)/computer network attacks (CNA) techniques 

Possess a basic understanding of tactical and operational intelligence analysis and be familiar with various cyber threat actors, attack vectors and techniques 

Knowledge of various malware types/families, attack tools, campaigns, espionage and crime actors 

Knowledge of technical analytical process and available toolsets 

Familiar with file analytics, including Microsoft Office Documents, PDFs, Rich Text Files, etc. 

Familiar with behavioral malware analysis, both tools and techniques 

Familiar with all major operating systems (Linux, Windows, MacOS) at a system and userland level 

Ability to specialize in specific areas of expertise, process complex data, search for patterns and behaviors across wide sets of data 

Ability to write high-quality reports for various audiences 

Ability to present findings and research to larger audiences outside of the security organization 

Ability to work on an ad-hoc basis to support the needs of the organization 

We would love to see: 

Experience with programming languages such as C, C++, python, Unix Shell, etc 

Experience with malware analysis, dynamic and static, tools, and techniques 

Experience with memory analysis and disk forensics 

Knowledge of vulnerabilities and exploits 

Able to work in fast paced environment where priorities and focus shift regularly and deadlines get truncated 

Bachelors of Arts or Bachelors of Science degree 

What’s it like to work here? 

We work hard. We are ambitious and set ourselves tough business goals. We are a meritocracy, where everyone has a voice - not a job title. Working with people you trust, respect, and can collaborate with is more important than titles or positions. Things move fast, and we want people who will enjoy working in this environment and feed off the energy. That being said, it is not all about work. Giving back is one of our core values, and there are many ways to get involved in philanthropic initiatives, from helping local school kids with their reading, to helping clean up local parks and waterways. 

If this sounds like you: 

Apply if you think we are a good match. We will get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this: 

https://www.bloomberg.com/company/ 

Bloomberg is an equal opportunities employer and we value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. 

Salary Range = 125,000 - 170,000 USD Annual + Benefits + Bonus