Cyber Threat Intelligence Engineer - Director - Cybersecurity Engineering
Marks & Spencer Group plc2 hours ago
Mumbai, IndiaStaff+
Responsibilities
- Design, develop, and improve systems for collecting, storing, processing, and analyzing data for threat intelligence.
- Evaluate data sources and APIs and integrate them into automated operations.
- Develop and maintain the Threat Intelligence Platform and automated intelligence workflows.
- Optimize data-processing and analysis pipelines and automate manual processes for CTI analysts.
- Translate complex requirements into technical designs and solutions and collaborate with development teams and cybersecurity stakeholders.
- Provide scripting and automated support for data extraction, analysis, scaling investigations, and partner-team requests.
- Communicate technical specifications through calls and presentations and maintain documentation for automation workflows.
Requirements
- At least 4 years of experience in a cybersecurity field such as Security Operations, Threat Intelligence, Security Engineering, or DFIR.
- At least 1 year of experience building automation solutions using Python.
- Familiarity with threat intelligence, security-focused data analysis, network traffic analysis, log analysis, IOC analysis, or malware analysis.
- Knowledge of cybersecurity frameworks including MITRE ATT&CK, STIX/TAXII, or the Diamond Model is preferred.
- Experience with object-oriented programming and debugging is preferred.
- Knowledge of distributed systems architecture, Kubernetes, Docker, and containerization is preferred.
- Knowledge of vendor and open-source security research APIs is preferred.
- Familiarity with Python-based machine-learning and AI libraries used for data analysis is preferred.
- Strong written and verbal communication skills and experience working with multiple stakeholders.
- Comfort working in a geographically distributed team setting.
Benefits
- Morgan Stanley offers comprehensive employee benefits and perks supporting employees and their families.
- The role is based in Mumbai and involves working with geographically distributed teams.
Tech Stack
Categories