Principal Cyber Defense Analyst, ITC

About the role

Nike is hiring a Principal Cyber Defense Analyst (Principal Threat Intelligence Analyst) for its Cyber Threat Intelligence team within Corporate Information Security. The analyst works with the Nike Cyber Defense Center & Incident Response and the CIS Operations Management team, researching and analyzing current and emerging threats and vulnerabilities that could pose risk to Nike.

Key responsibilities

• Own Priority and Strategic Intelligence Requirements and the threat-prioritization framework, producing board-ready risk framing for executives
• Define the collection strategy across open, closed and technical sources and set analytic tradecraft standards across CTI, the SOC and Detection Engineering
• Track and attribute threat actor groups and campaigns, and drive the intelligence-to-detection pipeline, measuring how much CTI output becomes deployed detection coverage
• Analyze vulnerabilities and exploits, recommend patching priorities, and integrate open-source intelligence tools and API customizations feeding data visualization tools such as Tableau
• Identify and develop IOCs, support the Cyber Defense Center & Incident Response with artifact analysis and research, and share knowledge with the team

Required profile

• 8-10+ years of experience in cyber threat intelligence, security operations or incident response in an enterprise or global environment
• Bachelor's degree in IT, information security, computer science or engineering, or equivalent experience
• Proven experience in incident response, threat validation, sandboxing, reverse engineering and exploit analysis, and expertise with honeypots, canaries and active deception
• Strong people leader with excellent communication skills and discretion with sensitive material

Required skills

• MITRE ATT&CK, CAPEC, MISP, Malpedia, STIX/TAXII
• Python, C++, Assembly, and YARA rule creation
• CISA KEV catalog, EPSS and exploit-maturity indicators
• Preferred: GCTI, GREM, GXPN, CTIA, CISSP or equivalent