Vodafone Career – Cyber Threat Intel Specialist In Southampton

Overview

Position Title: Cyber Threat Intel Specialist

Company: Vodafone

Location: Southampton, UK

Job Description:

At Vodafone Global Cyber Security, we help our customers to remain secure and resilient in a world of increasingly sophisticated cyber-attacks. We offer a unique combination of highly resilient networks, enterprise-class cloud platforms, advanced security systems and expert advice, helping limit the risks of a mobile workforce, such as commercial losses, regulatory breaches or threats to individuals, whilst enabling productivity and employee satisfaction. Joining us as a Cyber Threat Intelligence Specialist, you can be part of our empowering our Cyber Security function. The Future is exciting. Ready?

To reduce Vodafone’s cyber risk exposure by collecting, analysing and disseminating cyber intelligence to proactively defend against threats. The Cyber Intelligence Specialist works at the heart of Vodafone’s Global Cyber Defence organisation in the Cyber Defence Threat Intelligence team.

The role holder will advise on evolving tactics, techniques and procedures used by threat actors in order to inform improvements in Vodafone’s security controls, processes and technologies. Working at the heart of Cyber Defence, the role holder influence how operational and tactical threat intelligence is used across multiple security disciplines to detect and respond to threats.

Responsibilities:

• Act as part of Incident Response team where appropriate and provide operational cyber intelligence support during ongoing incidents.
  Support and lead the delivery of cyber security assessments and action recommendations to stakeholders at technical, managerial and executive level.
• Research threats, Indicators of Compromise (IoCs) and threat actor TTPs to support Threat Hunting, Signature Development and Threat Intelligence Platform (TIP) process.
• Evaluate and refine available technical intelligence feeds to drive maximum value.
• Support and lead Threat Action Groups to coordinate SMEs and develop response plans to mitigate cyber threats before Vodafone is impacted.
• Establish mutual technical intelligence sharing with credible external sources and work with Vodafone operating companies to coordinate a global intelligence sharing community.

Requirements:

• Ability to generate clear and concise reports and presentations for stakeholders from technical CSOC analysts to management and SLT.
• Strong technical knowledge of the cyber threat landscape, trends, attack methodologies (e.g. Kill Chain, MITRE ATT&CK, Diamond Model) and control environments.
• Experience in link analysis or data analysis tools.
• Proven track record in operational cyber security, Security Operations Centre (SOC) or cyber threat intelligence and defending a large organisation from top-tier threat actors.
• Security or Intelligence certifications desirable such as GIAC GREM, GDAT, GCTI etc
• Ability to synthesise multiple and divergent sets of data/information into concise and clear threat analysis.