Cyber Threat Intelligence / VOC Analyst

Project overview

Context

Within a company specializing in cybersecurity, the Cyber Threat Intelligence (CTI) and Vulnerability Operations Center (VOC) Analyst role is part of a new initiative to reduce cyber risk. It aims to anticipate emerging threats, identify vulnerabilities that could be exploited, and support teams in implementing appropriate protection measures.

On the CTI front, the mission consists of continuously monitoring the threat ecosystem, analyzing malicious campaigns, attacker groups, critical vulnerabilities, and compromises that could impact the company or its business sector. Collected intelligence is contextualized to provide operational teams and decision-makers with a clear view of risks and actions to be taken.

On the VOC front, the activity focuses on the operational management of vulnerabilities. This includes identifying, qualifying, prioritizing, and tracking the remediation of vulnerabilities detected within the information system. The approach is risk-based, taking into account asset criticality, vulnerability exploitability, and the company's actual exposure.

The complementarity between CTI and VOC activities allows for effective prioritization of security actions, drawing on both threat knowledge and visibility of the attack surface, thereby contributing to the continuous improvement of the company's cybersecurity posture.

Missions

Cyber Threat Intelligence (CTI)

Vulnerability Operations Center (VOC)

Working Conditions

• Ensure continuous monitoring of threats, vulnerabilities, attack campaigns, and malicious actors likely to impact the company.
• Anticipate cyber risks by identifying emerging threats and sector trends.
• Provide contextualized analyses to guide security decisions and operational priorities.
• Strengthen incident detection and response capabilities by enriching security systems with actionable intelligence.
• Support cybersecurity teams in assessing threat exposure.
• Oversee the vulnerability management process across the entire information system.
• Identify, qualify, and prioritize vulnerabilities based on their criticality and exploitability.
• Manage and track remediation actions in collaboration with technical teams.
• Reduce the company's attack surface through proactive management of security weaknesses.
• Produce indicators to measure the evolution of the risk level and the effectiveness of corrective actions.
• Location: Paris

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: French