Cyber Threat Analyst

Hornetsecurity • Full-time • Vancouver, BC, CA • 3w ago

We are a fast-growing SaaS cybersecurity company dedicated to protecting millions of users worldwide. As part of our continued growth, we are looking for a talented Cyber Threat Analyst to join our Threat and Intelligence Response Center (TIRC) team.

As a Cyber Threat Analyst, your primary mission will be to proactively combat cyber threats by improving and continuously updating Hornetsecurity’s security solutions. Your work will have a direct impact on the security of our customers in Canada and around the world.

We are looking for a candidate available 40 hours per week in a hybrid working model.

Your Responsibilities

Analyze threat events generated by our security services and classify threats (spam, scam, phishing, spear phishing, malware).
Investigate simple to advanced threat campaigns in order to identify and neutralize malicious elements (IPs, domains, etc.).
Design, maintain, and continuously improve detection systems to proactively block sophisticated threats.
Leverage reporting tools and spam traps to understand and anticipate sender behavior, monitor the performance of detection mechanisms, and trigger investigations in case of anomalies.
Produce clear documentation and reports on malicious activities and attacker techniques, and conduct in-depth investigations on dedicated topics (phishing, spambots, scams, etc.).

Your Profile

We are primarily looking for a committed and motivated individual with a strong interest in cybersecurity, eager to grow in a dynamic and challenging environment.

Experience in cybersecurity analysis, ideally within a SOC (Security Operations Center).
A strong desire to learn and continuously improve.
Solid threat analysis skills.
A logical and structured mindset (including familiarity with Boolean algebra).
An interest in data analysis (knowledge of big data tools is a plus).
Strong communication skills and a team-oriented mindset.

You will benefit from a 3- to 6-month onboarding and training period, enabling you to build expertise in cyber threats and our advanced detection tools.

To succeed in this role, you demonstrate curiosity, autonomy, rigor, and initiative.

Nice to Have (Optional)

Knowledge of regular expressions (POSIX Regex).
Proficiency in Windows and Linux environments and related command-line tools (bash, grep, etc.).
Knowledge of HTML and the SMTP protocol.
Experience with SPF, DMARC, and DKIM, as well as SIEM tools / ClickHouse.
Familiarity with the email security ecosystem.