Cyber Threat Intelligence Analyst
Organizational Context
The United Nations Development Programme (UNDP) partners with Brazil's National Council of Justice (CNJ) to enhance cybersecurity within the Brazilian Judiciary. This initiative, Project BRA/25/025, focuses on developing and implementing tools and strategies for cybersecurity, digital preservation, and information integrity to strengthen institutional security and improve judicial processes.
Job Purpose
The Cyber Threat Intelligence Analyst will lead the collection, analysis, and dissemination of cyber threat intelligence to anticipate risks, deepen understanding of threat actors and incidents, and bolster the resilience of Brazilian Judiciary institutions. This role is crucial for developing a proactive cyber defense posture, supporting operational security, and contributing to the overall security and efficiency of the justice system under Project BRA/25/025. The analyst will collaborate closely with CNJ and UNDP teams, producing actionable intelligence for technical teams and management, and facilitating cooperation with national and international cybersecurity bodies.
Responsibilities
The Cyber Threat Intelligence Analyst is responsible for leading cyber threat intelligence efforts, including collection, analysis, and dissemination, to anticipate risks and enhance the resilience of Judiciary institutions. Key duties involve engaging in threat information-sharing networks, producing intelligence for alerts and advisories, and cooperating with national and international CSIRTs. The role requires conducting advanced analyses of threat actors, motivations, and TTPs, transforming raw data into actionable intelligence, and supporting vulnerability prioritization. Additionally, the analyst will monitor various sources for threats, define intelligence requirements, produce indicators of compromise, collaborate with Blue Teams and Incident Response, and assess security coverage against frameworks like MITRE ATT&CK. The position also contributes to strategic risk management, security posture reviews, and integrating intelligence into capacity-building programs, while also developing and maintaining knowledge management systems and reporting standards.
Work Experience
Applicants with a Master's degree are not required to have professional work experience. Those with a Bachelor's degree must have a minimum of two years of experience in Cyber Threat Intelligence. Previous experience in a SOC, CSIRT/CERT, or dedicated threat intelligence team, particularly within the public sector or justice system, is desirable. Experience with CTI platforms, scripting languages (e.g., Python), and Brazilian cybersecurity regulations is also beneficial.
Skills
Strategic Thinking, Business Acumen, Human-centered Design, Project Management, Cyber and Data Privacy Security Risk Management, Advanced analysis of threat actors and TTPs, Intelligence production and dissemination, Threat monitoring (open source, dark web), Indicator of Compromise (IoC) generation, MITRE ATT&CK framework application, Scripting and query languages (Python, KQL, SPL), CTI platforms (MISP, OpenCTI), STIX/TAXII, TLP, OPSEC, Digital forensics, Report writing (technical and executive), Portuguese fluency.