Back to all positions
Job #17450
Central Israel
· CybersecurityCyber Threat Intelligence (CTI) & Incident Response Specialist
Threat IntelligenceIncident ResponseSIEMMITRE ATT&CK
About the role
A leading, large-scale, and highly advanced organization in central Israel is looking for an experienced Cyber Threat Intelligence & Incident Response Coordinator (CTI + IR) to join its cybersecurity team. This is a unique opportunity to take on a highly impactful role within a complex enterprise environment. As a key focal point for CTI and IR activities, you will support frontline security operations, drive threat intelligence initiatives, and work closely with the CISO and key stakeholders across the organization.
Responsibilities
- Monitor and analyze cyber threats from multiple intelligence sources, including threat actors, attack campaigns, TTPs, and IOCs.
- Build and maintain an ongoing intelligence picture of cyber risks based on technical, business, and geopolitical insights.
- Investigate cyber incidents through log analysis, IOC identification, and attack reconstruction.
- Coordinate incident response activities with internal teams and external vendors.
- Develop and improve Incident Response playbooks, procedures, and response scenarios.
- Work with SIEM, SOAR, Threat Intelligence Platforms, EDR/XDR, and forensic tools.
- Produce intelligence reports, investigation findings, and actionable recommendations for stakeholders.
Requirements
- 3+ years of experience in Cyber Threat Intelligence (CTI) and Incident Response (IR).
- Proven experience analyzing cyber threats, including threat actors, attack campaigns, TTPs, and IOCs.
- Deep understanding of threat actors, attack methodologies, defensive security systems, and threat analysis frameworks, including MITRE ATT&CK and Cyber Kill Chain.
- Hands-on experience with incident investigation, log analysis, and root cause analysis.
- Experience with SIEM, Threat Intelligence Platforms, EDR/XDR, SOAR, and forensic tools.
- Strong ability to analyze network traffic and security logs, including PCAPs, proxy logs, and firewall events.
- Strong written and verbal communication skills in Hebrew and English.
- Personal skills: strong analytical thinking and problem-solving; ability to work independently and in cross-functional teams; excellent communication and presentation skills; ability to work effectively under pressure in dynamic environments.