Threat Analyst – Cyber Threat Intelligence & Hunting

About the role

As a Threat Analyst you will join SITA’s CSIRT Threat Team, part of the global Enterprise Information Security Office. Your mission is to proactively identify and analyse cyber threats targeting SITA, its customers and the wider aviation industry.

Key responsibilities

• Collect and analyse data from OSINT, commercial feeds (Recorded Future, Mandiant), Aviation‑ISAC, dark‑web forums and law‑enforcement sources.
• Research and maintain profiles on nation‑state APTs, cyber‑criminal syndicates and hacktivist groups targeting aviation.
• Produce actionable intelligence products such as weekly newsletters, quarterly landscape reports, flash alerts and vulnerability briefs.
• Monitor dark‑web marketplaces, data‑leak sites and underground forums for threats to SITA’s brand, data and supply chain.
• Share intelligence with Aviation‑ISAC, government CERTs, law‑enforcement and industry peers.
• Integrate indicators of compromise (IoCs) into SIEM (Elastic), SOAR (XSOAR) and XDR platforms (CrowdStrike).

Required profile

• Experience in both Cyber Threat Intelligence and Threat Hunting.
• Ability to work within a globally distributed team covering 24/7 operations.
• Strong analytical mindset for turning raw data into clear, actionable insights.

Required skills

• OSINT techniques
• Recorded Future platform
• Mandiant threat feeds
• Aviation‑ISAC collaboration
• Dark‑web monitoring
• SIEM (Elastic)
• SOAR (XSOAR)
• XDR platforms (CrowdStrike)
• IoC analysis and integration
• Threat actor profiling
• Vulnerability and exploit intelligence