Associate Cyber Threat Intelligence Analyst

The Cyber Security Operations Center (CSOC) works to understand the cyber threats we face as an organization, develops instrumentation for detection and monitors events 24x7 looking for suspicious activity. We proactively learn from current trends to build relevant detections and contextual understanding into the program. We strive to monitor meaningful security events around the clock, respond quickly, but always favor quality over speed.

If an Incident occurs, we are prepared to engage appropriate stakeholders and take required actions as needed. The CSOC department reports into the CISO, and we work closely with Engineering, Legal, Compliance, Investigations and many others across the organization to help unify security event monitoring and incident response. Our colleagues depend on us to be incident response pros that have a deep understanding of IT networks and systems.

On any given day, the department may analyze cyber security events, hunt for suspicious activity, research and disseminate threat intelligence, identify improvement opportunities for detection rules, improve procedures and train analysts. This associate Threat Intelligence Analyst role is part of our Cyber Threat Intelligence Team (CTI) within the larger Threat Hunting, Intelligence and Response (THIR) program.

What we do

THIR intelligence analysts provide context, perspective, and analysis on threat actors, current activity, emerging trends, and tactics, techniques, and procedures. Through research and detailed analysis, they produce in-depth coverage of espionage and cybercriminal threat actors relevant to Bloomberg. They support teams across Bloomberg’s information security program, including CSOC Security Analysis, threat hunting, incident response, and vulnerability management. We are trusted to deliver timely, accurate intelligence that is appropriately detailed, analytically rigorous, and actionable for each audience.

We’ll trust you to

• Leverage Open-Source Intelligence (OSINT), vendor-based and private intelligence sources
• Perform daily processing of intelligence-based reporting and threat feeds
• Conduct focused research and analysis on specific threats and threat actors
• Perform threat hunts based on intelligence reporting and in support of incident response
• Transform raw intelligence information and knowledge into tangible products
• Demonstrate a passion and good judgment as a Threat Intelligence professional
• Learn and understand the broader security of Bloomberg’s environment
• Remain up-to-date with cyber security threats and trends
• Work with varying seniority levels throughout Bloomberg to address cyber security threats
• Generate ideas for continued improvement, including conceptual design of new threat scenarios

You’ll need to have

• Excellent written and verbal communication skills
• Knowledge of common computer network exploitation (CNE)/computer network attacks (CNA) techniques
• Possess a basic understanding of tactical and operational intelligence analysis and be familiar with various cyber threat actors, attack vectors and techniques
• Knowledge of various malware types/families, attack tools, campaigns, espionage and crime actors
• Knowledge of technical analytical process and available toolsets
• Familiar with file analytics, including Microsoft Office Documents, PDFs, Rich Text Files, etc.
• Familiar with behavioral malware analysis, both tools and techniques
• Familiar with all major operating systems (Linux, Windows, MacOS) at a system and userland level
• Ability to specialize in specific areas of expertise, process complex data, search for patterns and behaviors across wide sets of data
• Ability to write high-quality reports for various audiences
• Ability to present findings and research to larger audiences outside of the security organization
• Ability to work on an ad-hoc basis to support the needs of the organization

We would love to see

Experience with programming languages such as C, C++, python, Unix Shell, etc

Experience with malware analysis, dynamic and static, tools, and techniques

Experience with memory analysis and disk forensics

Knowledge of vulnerabilities and exploits

Able to work in fast paced environment where priorities and focus shift regularly and deadlines get truncated

Bachelors of Arts or Bachelors of Science degree

What’s it like to work here?

We work hard. We are ambitious and set ourselves tough business goals. We are a meritocracy, where everyone has a voice - not a job title. Working with people you trust, respect, and can collaborate with is more important than titles or positions. Things move fast, and we want people who will enjoy working in this environment and feed off the energy. That being said, it is not all about work. Giving back is one of our core values, and there are many ways to get involved in philanthropic initiatives, from helping local school kids with their reading, to helping clean up local parks and waterways.

If this sounds like you

Apply if you think we are a good match. We will get in touch to let you know what the next steps are, but in the meantime feel free to have a look at this:

https://www.bloomberg.com/company/

Bloomberg is an equal opportunities employer and we value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Salary Range = 125,000 - 170,000 USD Annual + Benefits + Bonus

The referenced salary range is based on the Company's good faith belief at the time of posting. Actual compensation may vary based on factors such as geographic location, work experience, market conditions, education/training and skill level.

We offer one of the most comprehensive and generous benefits plans available and offer a range of total rewards that may include merit increases, incentive compensation (exempt roles only), paid holidays, paid time off, medical, dental, vision, short and long term disability benefits, 401(k) +match, life insurance, and various wellness programs, among others. The Company does not provide benefits directly to contingent workers/contractors and interns.

Discover what makes Bloomberg unique - watch our podcast series for an inside look at our culture, values, and the people behind our success.