Threat Intelligence Analyst

Location: Leca do Balio, Portugal

Key Responsibilities

• •Support Digital Risk Protection (DRPS) activities, including monitoring leaks, external attack surfaces, fraud threats and digital risks.
• •Monitor, identify, and analyze emerging cyber threats, threat actors, campaigns, and attack techniques.
• •Produce tactical, operational, and strategic threat intelligence reports.
• •Conduct research on cybercriminal groups, ransomware operations, vulnerabilities, exploits, and threat trends.
• •Contribute to threat intelligence briefings, customer reports, executive and operational-level reports.
• •Analyze indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and map findings to frameworks such as MITRE ATT&CK.
• •Enrich threat intelligence platforms and knowledge bases.
• •Collaborate with SOC, Incident Response, and other internal and external cybersecurity teams.
• •Participate in the continuous improvement of intelligence processes, methodologies, and automation initiatives.

Required Qualifications

• •Higher education degree or technical-professional qualification in Cybersecurity, Computer Engineering, Networks, or a related field.
• •Minimum of 3 years of experience in related roles.
• •Experience with Digital Risk Protection, brand monitoring and Fraud monitoring.
• •Experience with OSINT and SOCMINT techniques, dark web monitoring and intelligence gathering.
• •Knowledge on Cyber Threat Intelligence and Threat Exposure Management platforms such as Recorded Future, Sixgill, Flare, or similar.
• •Experience with Threat Intelligence Platforms (TIPs) such as OpenCTI, MISP, ThreatQ, or similar.
• •Understanding of cyber threat actors, malware, ransomware, phishing, and common attack vectors.
• •Familiarity with threat intelligence frameworks and methodologies.
• •Relevant certifications or training (e.g. CTIA, GCTI, CPTIA) will be considered an asset.
• •Strong analytical, research, and report-writing skills and ability to communicate technical findings to both technical and non-technical audiences.
• •Team-oriented mindset, organizational skills, sense of responsibility, and ability to work effectively in dynamic and collaborative environments.
• •Basic knowledge of malware analysis and network traffic analysis and familiarity with SIEM solutions and other security monitoring tools.
• •Basic scripting and programing skills will be appreciated (Python, PowerShell, Bash).
• •Good written communication skills and ability to understand technical English;
• •Native Portuguese speaker and professional proficiency in English (C1).

Location: Lisbon or Porto (hybrid working model)