Cyber Threat Intelligence Analyst

Overview:
**We Are PepsiCo**

***

Join PepsiCo and Dare for Better We are the perfect place for curious people, thinkers and change agents. From leadership to front lines, we're excited about the future and working together to make the world a better place.

Being part of PepsiCo means being part of one of the largest food and beverage companies in the world, with our iconic brands consumed more than a billion times a day in more than 200 countries.

Our product portfolio, which includes 22 of the world's most iconic brands, such as Sabritas, Gamesa, Quaker, Pepsi, Gatorade and Sonrics, has been a part of Mexican homes for more than 116 years.

A career at PepsiCo means working in a culture where all people are welcome. Here, you can dare to be you. No matter who you are, where you're from, or who you love, you can always influence the people around you and make a positive impact in the world.

**Know more**:PepsiCoJobs**

**Join PepsiCo, dare for better.**

**Responsibilities**:
**The opportunity**

The Senior Cyber Intelligence Analyst is responsible for supporting the cyber intelligence function for the Cyber Fusion Center. The Cyber Intelligence Analyst will use a wide range of sources of technical data collection and analysis in order to produce a common operating picture of intrusion or threat related activity. This includes identifying, tuning, and maintaining new technical and non-technical sources of information, IOC management, TIP expertise, threat research, threat profile development, analysis, alert triage, and coordinating US team tasks with other locations.

**Your impact**
- Lead North American team’s daily task management and operations so that intelligence monitoring can seamlessly support a follow-the-sun support model.
- Develops a risk-based model of historical threat activity, trends and common attack vectors tied to tactics, techniques, and procedures (TTPs) to support threat detection and pen testing teams.
- Provides data driven research to internal teams and leadership on changes to the cyber threat landscape through various internal and external tools to support incidents.
- Collects and manages IOCs related to threats to the organization through feed integration with partner institutions, mailing lists, open source news, and industry partnerships.
- Establish relationships between the CTI team and other groups, both internal (e.g., other CFC teams) and external (e.g., paid partnerships, and trust groups).
- Share relevant cyber intelligence findings to variety of internal audiences (Senior Leadership, IT Teams, User communities, etc.) and external trust groups
- Participation in after hours on-call rotation when required.

Qualifications:
**Who are we looking for?**
- 5+ years of experience with a combination of cyber threat intelligence or research and threat detection or incident response work, at least 2 years of which should be in a large multinational company
- Knowledge of current and historical Threat Actor Group(s) tactics, techniques, and procedures
- Knowledge of threat intelligence tools & management platforms
- Intimate knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, Diamond Model of Intrusion Analysis, or other relevant network defense and intelligence frameworks
- Experience with collecting, analyzing, and interpreting data from multiple sources, documenting the results and providing meaningful analytic products (e.g., a Collections Manager)
- Knowledge of the principal methods, procedures, and techniques of gathering information and producing, reporting, and sharing intelligence
- Demonstrated knowledge of common adversary tactics, techniques, and procedures (TTPs)
- Knowledge of enterprise level ticketing systems, SLA management, and processes found within cyber fusion centers
- Foundational knowledge in IT infrastructure, to include hardware, networking, architecture, protocols, files systems and operating systems.
- Knowledge of network security technologies, log formats, SIEM technologies, and security operations
- Experience with tool migration, testing, and integration
- Experience with intelligence feed alert and data feed tuning and source cultivation
- Experience with Python or other scripting languages
- Strong collaborative skills and proven ability to work in a diverse global team of security professionals
- Strong organizational skills and mentoring
- Strong verbal and written skills with proficiency in English
- Excellent interpersonal skills

**What can you expect from us**:

- Opportunities to learn and develop every day through a wide range of programs.
- Internal digital platforms that promote self-learning.
- Development programs according to Leadership skills.
- Specialized training according to the role.
- Learning experiences with internal and external providers.
- We love to celebrate success, which is why we have recognition programs for seniority, behavior, leadership, moments of life, among others.
- Financial wellness progr