Cyber Threat Intelligence Analyst (Cybersecurity)

Location: Tel Aviv, Israel. Applicants must be authorized to work in the country in which they apply and provide proof of employment eligibility.

Company

Nebius builds a full-stack AI cloud platform for data processing, model training, and production deployment, including compute, storage, networking, and applied AI infrastructure.

What you will do

• Collect threat intelligence across OSINT sources, commercial platforms, Dark Web, and Telegram.
• Process, triage, validate, enrich, and consolidate alerts and intelligence feeds.
• Identify spoofed domains, brand impersonation, leaked credentials, exposed assets, and infrastructure risks.
• Assess threat impact, track threat actors and TTPs, and map activity to MITRE ATT&CK.
• Support SOC incident investigations and intelligence-driven threat hunting.
• Manage IOCs, watchlists, source attribution, confidence levels, TLP classification, and structured reporting.

Requirements

• Understanding of CTI methodology and the intelligence cycle.
• Hands-on experience with OSINT tools such as Shodan, Censys, crt.sh, and VirusTotal.
• Experience triaging alerts, consolidating feeds, and validating intelligence across independent sources.
• Understanding of MITRE ATT&CK, TTP mapping, and attack techniques targeting cloud infrastructure.
• Ability to support incident investigations and threat hunting with SOC and cybersecurity teams.
• Strong analytical reasoning, critical thinking, problem-solving, and concise technical writing skills.

Nice to have

• Experience with cloud or AI infrastructure.
• Experience with Digital Risk Protection, external attack surface monitoring, or brand monitoring.

Culture & Benefits

• Competitive compensation.
• Career growth and learning opportunities.
• Flexibility and ownership.
• Collaborative, innovative, and international environment.
• Opportunity to work on impactful AI projects.