Senior Threat Intelligence and Threat Hunting Analyst bei Learning and Inclusion

• Gather, process, and analyze threat data from different sources to create actionable threat intelligence.
• Create and deliver in-depth threat intelligence and threat landscape reports, briefings, and presentations tailored for both technical and non-technical stakeholders.
• Provide situational awareness updates to senior leadership on high-priority threats and geopolitical developments impacting cybersecurity.
• Create and maintain threat profiles for key adversaries targeting the organization or sector.
• Manage a threat intelligence platform (TIP) and ensure proper integration with SIEM, SOAR, and other security tools.
• Manage the assessment and follow-up of third-party security incidents or compromises.
• Design and perform threat hunts and purple team exercises to identify malicious activity, misconfigurations, and visibility gap.
• Help create and maintain detection content, new alerts, dashboards, documentation, playbooks, guidelines, and metric.
• Design, implement, and maintain automated workflows for threat intelligence and threat hunting workflows.
• Serve as a Tier 3 escalation point for the Cybersecurity Operations Center (CSOC) and major Incident Response.
• Evaluate and recommend new tools and technologies to enhance capabilities.

• Master's Degree in Computer Science, Cybersecurity, or other related area and 2 years of relevant work experience.
• Bachelor's Degree in Computer Science, Cybersecurity, or other related area and 3 years of relevant work experience.
• Associate's Degree in Computer Science, Cybersecurity, or other related area and 4 years of relevant work experience.
• High School Diploma/GED and 5 years of relevant work experience.

• Experience in threat intelligence, threat hunting, detection engineering, or a related cybersecurity role, required.
• Possess a deep understanding of cyber threat intelligence and threat hunting frameworks, methodologies, and approaches, required.
• Familiarity with threat intelligence tools and platforms (e.g., TIP, Shodan, VirusTotal) required.
• Strong experience in analyzing IOCs, TTPs, user logs, host logs, network logs, and/or PCAPs to detect malicious activity, required.
• Strong understanding of the MITRE ATT&CK Framework, preferred.
• Strong understanding of Incident Management and Incident Response frameworks, preferred.
• Strong knowledge in Splunk Enterprise Security and Splunk SOAR, preferred.
• Experience using Microsoft Sentinel and KQL, preferred.
• Strong programming experience with Python or a similar language, preferred.
• Knowledge of digital forensics and investigation techniques, particularly on Windows and Linux, preferred.
• Knowledge on cloud security and cloud architecture best practices, preferred.
• OT/ICS Security knowledge, preferred.

• Possesses strong technical aptitude
• Excellent collaboration and team building skills
• Strong verbal communication and listening skills
• Demonstrated written communication skills
• Must be proficient in Microsoft Office including Word, Excel, Outlook and PowerPoint, etc.

• Driver's License Required
• Other: Technical certifications (e.g. CISSP, CISM, CIPP, etc.) Preferred

• The selected candidate will be assigned a System Emergency Assignment (i.e., an emergency response role) and will be expected to work non-business hours during emergencies, which may include nights, weekends, and holidays.
• Must be able and willing to travel within Company service territory, as needed.
• Must be available 24/7, on call, and/or participate in off-hour emergency response activities as required.

EEO Statement:

Consolidated Edison Company of New York, Inc. (Con Edison), Orange & Rockland Utilities (O&R), and Consolidated Edison Transmission (CET) are equal opportunity employers. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of the individual’s actual or perceived disability, protected veteran status, race, color, creed, religion, sex, age, national origin, gender, gender identity, gender expression, genetic information, marital status, sexual orientation, citizenship, domestic violence victim status, or any other actual or perceived status protected by law.

Technical Difficulty Statement:

For technical issues, please contact us at [email protected]

Mission Statement:

Consolidated Edison Company of New York, Inc. (Con Edison), Orange & Rockland Utilities (O&R), and Consolidated Edison Transmission (CET) employees are required to follow health, safety, and environmental policies, EEO, Standards of Business Conduct, and all other applicable company policy and procedures. We all share a responsibility to advance the company’s mission by excelling at our three corporate priorities – safety of our people and the public, operational excellence in all that we do, and ensuring the best possible customer experience.

Benefits:

We are dedicated to supporting the physical, mental, and financial health of our employees and their families. This commitment extends beyond the workplace to foster personal growth and holistic wellbeing. Our life-changing rewards package includes:

• Rich medical & pharmacy benefits, including vision benefits
• Dental benefits
• Health Savings Accounts
• Health Care and Dependent Care Flexible Spending Accounts
• 401(k) with robust matching
• Employer paid Pension Plan
• Employee Stock Purchase Plan with a generous matching contribution
• State of the art Employee Assistance Program
• Paid Parental Leave
• Generous paid time off plus paid holidays
• Family support: emergency backup child, & elder care assistance
• Social responsibility and volunteer opportunities
• Employee discount program
• Commuter Benefits
• Culture of growth and learning: career development; tuition reimbursement; recognition program
• Life and Long-Term Disability Benefits

*Please be aware that some benefits may not apply to provisional or part-time job titles.