Cybersecurity Consultant / OPENCTI

Project overview

Mission Objectives

Main Activities

Profile Sought

Profile Sought: We are looking for a cybersecurity consultant with operational expertise in OpenCTI, particularly in integrating its existing connectors.

The candidate must be able to work on the configuration, activation, and implementation of interconnections between OpenCTI and the client's various IT security solutions, in a hybrid environment combining On-Premise and SaaS solutions.

Significant experience in integrating CTI solutions or cybersecurity platforms, ideally in a banking or highly secure environment, will be particularly appreciated.

Work Environment

Technical Skills Sought

Complementary Skills - Must Have

• Support the technical integration of OpenCTI with existing security solutions.
• Identify, activate, and configure native or existing connectors suited to client needs.
• Ensure interconnection between OpenCTI SaaS and various On-Premise and SaaS solutions.
• Guarantee the proper flow, synchronization, and consistency of exchanged data.
• Ensure the reliability of Threat Intelligence data ingestion and enrichment flows.
• Ensure the proper functioning of connectors and resolve any technical issues.
• Analyze the existing technical architecture and identify interconnection methods with OpenCTI.
• Study available connectors and select those that meet integration needs.
• Activate, configure, and parameterize existing OpenCTI connectors.
• Implement interconnections with On-Premise and SaaS cybersecurity solutions.
• Configure data exchanges via REST API and associated communication mechanisms.
• Parameterize CTI data ingestion, synchronization, and enrichment flows.
• Verify the compatibility of exchanges with used data standards and formats, particularly STIX/TAXII.
• Manage connectivity, authentication, access rights, and data flow security issues.
• Perform integration tests and validate the proper functioning of activated connectors.
• Ensure operational monitoring, diagnosis, and resolution of incidents related to interconnections.
• Produce technical documentation and configuration/operation procedures.
• Technical expertise in OpenCTI, with hands-on experience in platform integration and configuration.
• Good command of OpenCTI architecture and its connector ecosystem.
• Experience in activating, parameterizing, and operating existing connectors.
• Mastery of REST APIs and inter-application interconnection mechanisms.
• Good knowledge of CTI exchange standards and formats: STIX 2.1 and TAXII.
• Experience in integrating cybersecurity solutions in On-Premise and SaaS environments.
• Ability to diagnose connectivity, authentication, and data flow issues.
• Knowledge of SIEM, SOAR, EDR, and other cybersecurity tools.
• Understanding of cloud architectures and interconnection issues between SaaS and On-Premise environments.
• Knowledge of API authentication and security mechanisms (OAuth2, tokens, certificates, etc.).
• Knowledge of Python to facilitate understanding and diagnosis of connector functioning.
• Knowledge of security and isolation challenges specific to banking environments.

Project details

• Start: ASAP
• Duration: 3 ans
• Remote: hybrid
• Location: Paris, France, FR
• Rate: 50-79 EUR/h
• Languages: French