Threat Analyst, US remote

Location: Remote, however, must reside & be authorized to work in the US

About the role

Cofense is the only cybersecurity platform focused exclusively on stopping phishing—the most persistent and evolving cyber threat. Our expert-supervised AI, combined with real-time intelligence from 35M+ trained users, detects advanced phishing attacks other solutions miss and remediates them in minutes. Cofense delivers high-confidence alerts that reduce false positives and identify false negatives, improving security team efficiency. Real-world simulations continuously train employees to recognize and report what technology can’t catch. Cofense augments your existing email defenses, covering phishing detection and response gaps.

Reporting to the Manager of Threat Analysts, the Threat Analyst is responsible for the analysis and processing of phishing threats reported by our customers and providing details and guidance to help customers mitigate identified threats.

Responsibilities

• Monitor systems for customer reported emails
• Analyze phishing campaigns and related threats to identify patterns
• Gather intelligence information from analyzed malware for dissemination to customers
• Assess reported emails to determine if an email poses a threat or is benign
• Identify malicious nature of threats and provide details and guidance to the customer on how to mitigate the threat
• Initiate threat analysis tickets for email threats
• Maintain ownership of tickets opened for customers including updating, communicating and documenting resolutions for customers
• Write rules, signatures, and descriptors for data sharing and automation technologies
• Leverage malware analysis platforms and technologies to identify malware infrastructure and tactics as needed
• Assist in production of monthly customer reports
• Identify process improvements to add efficiency and effectiveness to our services
• Other duties as assigned

Requirements

• 1+ years of IT security experience or security education
• Working knowledge of networking, operating systems, email infrastructures, anti-virus programs, and advanced threat detection systems
• Skilled with common end-user applications, web browsers, and productivity applications such as MS Word, Excel, and PowerPoint that are commonly targeted by malware
• Ability to apply critical thinking to threat investigations
• Ability to recognize the need for prompt escalation of malware review
• Flexibility to work evening hour shifts as the job necessitates
• Strong verbal and written communication and organizational skills
• Strong critical thinking and operational judgment skills
• Ability to work in a fast-paced, team-oriented environment
• Basic understanding of email protocols, headers, and formats
• Ability to learn new techniques for conducting malware analysis
• Ability to learn and quickly implement tradecraft standards
• Ability to exercise independent judgment and creative problem-solving techniques
• Regex and YARA rule creation (nice to have)

Qualifications

• Degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience preferred
• Demonstrated experience to perform phishing and malware analysis
• Certification in one major technology provider or Malware Analysis and Incident Response preferred (e.g., CEH, GCIA, Security+, MCSA/MCSE, VCP, CCNA/CCNE, Network+, A+, CCSP, AWS Architect)

Benefits

• 100% Remote
• Flexible / unlimited PTO
• 401k with company match