Experteer Overview
In this role you will strengthen the organisation’s cyber defence by producing actionable threat intelligence that informs detection, response, and strategic decisions. You will operate across the full intelligence lifecycle, turning technical findings into insights for technical and non-technical audiences. You’ll work to anticipate adversary activity, improve detection and incident response, and contribute to intelligence-led security operations. The role offers ongoing tooling development, cross-team collaboration, and engagement with the threat intelligence community, providing a meaningful impact on security priorities and risk management.

Compensaciones / Beneficios
• Identify and track threat actors, TTPs, infrastructure, and IoCs across the intelligence lifecycle
• Monitor C2 infrastructure, malicious domains, and campaigns; provide context-rich assessments with geopolitical context
• Map activity to MITRE ATTu0026CK and produce STIX/TAXII-based outputs
• Conduct malware analysis (static/dynamic) to extract configurations and attribute activity
• Stay current with evolving threat landscape and identify new threats and attack vectors
• Produce finished intelligence products for technical/non-technical audiences
• Document malware behavior, TTPs, and IoCs; disseminate via TIP tooling
• Contribute to external communications through blogs,



talks, or research
• Respond to RFIs with timely, actionable intelligence
• Develop and maintain YARA rules and other detection signatures
• Manage threat intel platforms and feeds; improve analysis efficiency
• Develop scripts/tools to automate collection, enrichment, and dissemination
• Evaluate new tools to strengthen analytical capabilities
• Mentor and support other analysts; collaborate with DFIR and SOC teams
• Generate detection leads and maintain structured handoffs
• Contribute to intelligence-led threat hunting with targeted assessments
• Engage with external partners and information-sharing communities

Responsabilidades
• Threat intelligence analysis experience with lifecycle understanding
• Strong networking knowledge (TCP/IP, DNS) and adversary use of networks
• Familiarity with MITRE ATTu0026CK and STIX/TAXII
• Operational experience with DFIR and SOC teams
• Understanding of offensive security reconnaissance and attacker methodologies

Requisitos principales
• Versátil working
• 25 days holiday + bank holidays (+5 with buy-back)
• Medicash u0026 Critical Illness
• Pension, Life Assurance, Share Save Scheme
• Community u0026 volunteering programmes
• Green Car Scheme + Cycle to work

📌 Senior Analyst - Tactical Intelligence (Madrid)
🏢 Ncc Group
📍 Madrid