CTI Analyst

Job Description

The Cyber Threat Intelligence (CTI) team is looking for an analyst to join us. Youll be part of a diverse global team working together to protect our organization by turning data and information into actionable intelligence.

In this role youll be involved in the full intelligence cyclefrom collecting information analyzing it to delivering it to the right stakeholders in a clear and actionable waywith a strong focus on vulnerabilities and their real-world exploitation by threat actors. Your work will help us understand the evolving threat landscape identify which vulnerabilities matter the most based on active exploitation and strengthen our ability to detect and respond to threats in our environment.

Youll engage with a broad range of stakeholders from highly technical teams to colleagues with diverse business backgrounds collaborating across internal departments and with external partners.

What youll do:

• Monitor and assess threat intelligence landscape specially related to vulnerabilities actively exploited by threat actors.

• Evaluate exploitation prerequisites for vulnerabilities and potential impact on our environment.

• Correlate vulnerability intelligence with internal asset and exposure data to assess organizational risk.

• Proactively hunt for evidence of exploitation of high-risk vulnerabilities including retrospective analysis to identify potential compromise prior to patching.

• Collaborate closely with incident response and vulnerability management teams.

• Brief stakeholders and leadership on threats trends and vulnerability-driven risks.

• Respond to high-priority requests for information from stakeholders.

• Gather and analyze information from a variety of internal and external sources.

• Assess and test new tools and capabilities to improve CTI and vulnerability intelligence workflows.

• Identify and drive process improvements particularly in vulnerability intelligence integration with detection and response.

What were looking for:

• Understanding of vulnerabilities exploitation techniques and common attack paths.

• Ability to assess exploitability (e.g. prerequisites exposure weaponization) rather than relying solely on severity scores.

• Experience with threat hunting log analysis or working with security telemetry (e.g. SIEM EDR).

• Strong written and verbal communication skills you know how to explain complex things clearly.

• A good understanding of Cyber Threat Intelligence processes and the intelligence lifecycle.

• Ability to work both independently and as part of a global team.

• Curiosity self-motivation and a desire to keep learning.

• A creative mindset you enjoy finding new ways to solve problems or improve processes.

• A degree in computer science international security or another relevant field (or equivalent experience).

What we offer

• Exciting work in a great team global projects international environment
• Opportunity to learn and grow professionally within the company globally
• Hybrid working model flexible role pattern
• Competitive salary & incentive pay
• Pension and health insurance contributions
• Internal reward system and referral scheme
• 5 weeks annual leave5sick days15days of certified sick leave paid above statutory requirements annually40 paid hours annually for volunteering activities12weeks of parental contribution
• Cafeteria for tax free benefits according to your choice (meal vouchers sport culture health travel etc.) Multisport Card
• Vodafone Raiffeisen Bank Foodora and discount programmes
• Up-to-date laptop and iPhone
• Parking in the garage showers refreshments massage chairs library music corner

Ready to take up the challenge Apply now!

Know anybody who might be interested Refer this job!

Required Skills:

Preferred Skills:

Current Employees apply HERE

Current Contingent Workers apply HERE

Search Firm Representatives Please Read Carefully
Merck & Co. Inc. Rahway NJ USA also known as Merck Sharp & Dohme LLC Rahway NJ USA does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place introductions are position specific. Please no phone calls or emails.

Employee Status:

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

Shift:

Valid Driving License:

Hazardous Material(s):

Job Posting End Date:

*A job posting is effective until 11:59:59PM on the day BEFOREthe listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.