Cyber Analyst Role
Lab 1 is a fast growing cybersecurity startup, which finds and interprets compromised data.
Lab 1’s AI platform analyses the full corpus of exposed corporate data in near real time, providing customers with the assurance that they’ll know the unknown and reducing the risk, cost and anxiety associated with exposed data across entire supply chains.
The role provides flexibility in work location, with the majority of staff working from home with occasional meetings in London and Norwich. The role will be remunerated through a salary and, after a qualifying period you will be granted a meaningful share in the company through an options grant.
The Role
The Cyber Threat Intelligence Analyst is responsible for providing intelligent and complex analysis of relevant threats, vulnerabilities, campaigns, and incidents as discovered through Lab 1’s platform and independent manual research.
The analyst will publish timely and actionable alerts, analysis and threat reports to help customers prepare for and manage their compromised data exposure.
The role also includes significant cyber intelligence research and analysis for the creation of new security tools, whitepapers and blog articles for publication.
Key Accountabilities
Perform open source threat identification and collection activities on deep, dark and open web to support customer exposure assessment requirements. This is achieved using a combination of Lab 1's automated platform and manual analysis with open source tools or proprietary tools. Key accountabilities also include:
- Provide subject matter expertise on actual or anticipated cyber-attacks and data compromises to assist customers in their proactive risk management, mitigation and control pre and post incident.
- Provide thorough assessments of existing and emerging cyber-attack tools, techniques and procedures such as new exploits, droppers, rats, obfuscation techniques and trojanised code.
- Identify credible, new intelligence and perform threat assessments to emerging threat actors and the data they collect.
- Provide subject matter expertise to support wider company initiatives, such as customer success, writing short blog articles, supporting technical research for white papers and marketing collateral.
- Demonstrate and maintain mature Operational Security (OpSec) in the application of technical tools and procedures for analysts and organisational safety, such as application of cryptographic tools, tor, secure deletion, separation of roles and infrastructure monitoring.
- Create written and verbal data exposure assessments, reports and summaries for customer and research articles.
- Develop and present key findings to senior technical and non-technical leadership.
- Establish and develop links with other threat analysts within the cyber intelligence community.
Skills, Experience & Competencies
- Qualified to degree level or A levels with equivalent work experience.
- Demonstrable understanding and experience with Linux and Open Source security tools are essential, preference given for active open source committers or security tools writers in any language.
- Some prior experience in analysing compromised artefacts, such as databases, documents, spreadsheets.
- Good understanding of indicators of compromise (IOC), threat hunting methodology, intelligence lifecycle and the application of open source tools.
- Excellent verbal and written communication skills with the ability to effectively articulate complex technical terms to both technical and non-technical audiences.
- Be able to adapt to a flexible working model, such as attending conference calls, meetings outside of normal office hours and occasionally travelling.
Advantageous:
- Willingness and ability to gain UK SC security clearance.
- Languages other than English. Russian, Turkish and Mandarin are particularly valuable.
We are interested in candidates who value:
- Act with integrity within a trusted role.
- Team working and collaboration.
- Supporting the organisation’s key vision and mission.
Job Type: Full-time
Pay: £25,000.00-£35,000.00 per year
Benefits:
- Company pension
- Work from home
Schedule:
Experience:
- Information Security: 1 year (required)
Work Location: Hybrid remote in ec1n 2st