Engineer, Information Security Threat Intelligence

Job Purpose

An IS Intelligence professional is part of a global team responsible for the ICE’s Information Security program. This position requires technical proficiency as well as an eager attitude, professionalism, and solid communication skills. 

Responsibilities

• Assisting in the day-to-day maintenance and management of threat intelligence workflows, including vulnerability management, threat hunting, coordinating with incident response to provide contextual intelligence, and triaging and processing tickets.
• Working in a Linux environment with open source and custom tools to manipulate data from Splunk, Elastic/ELK, and other sources into standardized formats, including writing custom scripts to automate basic file processing and data manipulation tasks.
• Threat hunting across the attacker kill-chain for advanced adversaries targeting ICE’s assets and employees, which constitute critical financial infrastructure.
• Reading, summarizing, and analyzing articles and reports from threat intelligence vendors, security websites, and researchers to determine their applicability to ICE’s environment and staff -- answering the question "so what?" and disseminating that information to intelligence stakeholders.
• Researching new open-source tools and projects to identify opportunities for improving the workflows and efficiency of the Threat Intel Team, Red Team, and Incident Response Teams.                          

Knowledge and Experience

• University degree in Engineering, MIS, CIS, or related discipline
• 3+ years' experience
• Systems administration or networking experience and/or coursework
• Experience coding in Python, Bash, and/or PowerShell
• Experience with Linux
• Experience in an exchange, trading facility, or other financial services
• Demonstrated interest in intelligence analysis, threat hunting, and/or vulnerability research

Specific Technologies

• Security automation tools, threat intelligence platforms, cloud security tooling, Splunk, ELK stack, data lake or other database tools, intelligence analysis techniques