Expert Threat Intelligence

About the job

A leading European player in the cybersecurity market and a subsidiary of the Airbus group, Stormshield is positioned as the leading pure-play French cybersecurity publisher. To continue our growth, we are seeking new talent and recruiting a Threat Intelligence Expert.

‍

Threat Intelligence Expert: Job Description Summary

• Poste : Expert Threat Intelligence
• Équipe : Stormshield Customer Security Lab (SCSL)
• ️Type : CDI
• Location:  Paris (Issy-les-Moulineaux), Lyon (9th) or Full Teleworking
• Teleworking:  Yes, up to 3 days per week

Threat Intelligence Expert: experience and skills

️⭐Who are we looking for?

As team leader of the SCSL team, Edouard is looking for a Threat Intelligence Expert. You have significant professional experience in the field of Threat Intelligence, for example as a cybersecurity or SOC analyst, and you know the resources and tools needed to set up a responsive and effective CTI unit; you're the person we're looking for.

The little extras:

• Advanced knowledge of Threat Intelligence and OSINT.
• Good view of the current threat.
• Mastery of tools helping to identify, characterize and categorize the threat (OpenCTI, MISP, Honeypot, etc.).
• Knowledge of scripting (PowerShell, LUA, Python, etc.).
  

️ What missions for the Threat Intelligence Expert?

The SCSL team is responsible for improving the protection we offer our customers in the face of constantly evolving threats. The Threat Intelligence team must provide the necessary threat intelligence to better target the protections we need to protect our customers.

Your mission will mainly consist of:

• Identify and define the hardware, software and human resources to be put in place to have a functional Threat Intelligence unit.
• Work jointly with the cells responsible for creating protections in Stormshield products.
• Manage the work of the reverse engineering unit to help you characterize the threat.
• Working on automated IOC collection to feed our MISP database.
• Assist in the design and development of Stormshield's TIP by identifying the right tools and flows to integrate for our needs.
  

The threat intelligence researched by Stormshield focuses primarily on gathering information on attack techniques (TTPs) used by malicious actors, identifying threats to our clients' business sectors, and producing IOCs. Gathering more "geopolitical" information and the dynamics of relationships between attack groups is not the primary focus of this position.

⚙️ What environments?

• Threat Intelligence : Identification and analysis of threats.
• Produits de sécurité : Stormshield Network Security, Stormshield Endpoint Security, Stormshield Log Supervisor, Stormshield XDR.

Threat Intelligence Expert: Why choose Stormshield?

🔗 Which team for the Threat Intelligence Expert?

You will be part of the SCSL R&D team. This team is made up of around ten people spread between Issy-les-Moulineaux, Lyon, and fully remote working, to effectively support all of our customers .

✔️What is the recruitment process?

• A first exchange with William , in charge of recruitment, to discuss what you are currently doing and how to work together.
• A technical interview with Edouard which will allow him to present to you in more depth the position, your future team 🤞 and the missions.
• An HR interview with Audrey , to present Stormshield in its entirety and all of its benefits.

Working hours and arrangements, flexible hours, benefits... More information on Stormshield's social policy in this quick infographic.

People  are at the heart of our development strategy, so we promote the integration of people with disabilities (RQTH).

‍