Cyber Threat Intelligence Engineer

Overview

Accenture Middle East is looking for a driven Cyber Threat Intelligence (CTI) Engineer to join its expanding security team in Riyadh. This position involves gathering, evaluating, and distributing critical threat intelligence to safeguard client environments from new and evolving cyber threats. It is ideal for cybersecurity professionals eager to advance their careers in the threat intelligence domain.

Key Responsibilities

• Gather and assess cyber threat intelligence from diverse sources including open-source platforms, commercial services, and proprietary internal feeds.
• Constantly observe the cyber threat environment to detect new threats, threat actor behaviors, and attack methodologies affecting the organization and its clients.
• Generate detailed and actionable intelligence reports tailored for both expert and generalist stakeholders.
• Provide contextual threat intelligence assistance to SOC (Security Operations Center) and incident response teams during security incidents.
• Manage and regularly update threat intelligence systems and repositories.
• Monitor and document profiles of threat actors, campaigns, and associated TTPs (Tactics, Techniques, and Procedures), leveraging frameworks like MITRE ATT&CK.
• Work collaboratively with internal teams to enhance threat detection and response based on intelligence insights.

Required Qualifications and Skills

• Between one and three years of experience in cybersecurity roles emphasizing Cyber Threat Intelligence or security analysis.
• Comprehensive knowledge of threat intelligence principles, methodologies, and structured models such as MITRE ATT&CK and Cyber Kill Chain.
• Hands-on experience with threat intelligence platforms (TIPs) and OSINT (Open Source Intelligence) tools.
• Fundamental understanding of network protocols, malware behavior patterns, and common attack vectors.
• Excellent analytical aptitude and research capabilities, with the skill to distill complex datasets into straightforward, comprehensible reports.
• Proficient verbal and written communication skills in both English and Arabic.
• Applicants must be Saudi nationals.

Preferred Attributes

• Familiarity with SIEM (Security Information and Event Management) platforms and log data analysis.
• Possession of relevant cybersecurity certifications such as CompTIA Security+, CEH, or certifications focusing on threat intelligence.
• A strong enthusiasm for continually learning about and keeping current with modern cybersecurity challenges and trends.