Description:
- The Home Depot’s Cyber Threat Intelligence team is looking for a cyber defender, who has the experience and skills to identify threats as they emerge.
- This role will involve the identification of vulnerabilities, attacker trends, and novel malware.
- It is critical to think outside of the box to identify threats that could potentially impact one of the largest retailers in North America.
- Understanding of the OWASP top 10, and the way in which adversaries exploit vulnerabilities is a big plus.
- This role will support Threat Intelligence Notifications and Operations activities within the Cyber Threat Intelligence team.
- Ability to compose well written reports and documentation that may be distributed to large parts of the organization.
- Technical understanding of the vulnerabilities on a variety of technologies.
- Has a growth mindset, and is interested in learning the basic tools and processes that The Home Depot Cybersecurity department has invested in.
- Familiarity with intelligence writing and structured analytic techniques such as analysis of competing hypotheses, "Devil's Advocate", and others.
- An understanding of corporate Information Technology environments.
- The ability to research and produce large amounts of technical and non-technical data into written and actionable reporting.
- Cyber Threat Intelligence experience such as familiarity with security researchers, vendors, and open source reporting.
- Familiar with researching cyber adversary TTPs, IOCs, malware and infrastructure.
- Familiarity with project planning and process design.
- Experience working with or willingness to learn the MITRE ATT&CK framework and its applications.
Requirements:
- Previous cybersecurity experience
- Previous technical reporting experience
- Familiarity working within or with Security Operation Teams
- Collaborative Mindset
- Curious and Open Minded
- Experience with OSINT research on Threat Actors/Emerging Threats/APT’s
- Bachelor's Degree in Cybersecurity (or Related Field)
- Retail Business understanding
- Familiarity with common threat intelligence subscriptions such as Recorded Future, Domain Tools, Maltego, and Virus Total, Shodan.
- Familiarity with industry standard frameworks such as Cyber Kill-chain, NIST SP-800-53, MITRE ATT&CK, and D3FEND.
Benefits: