{"id":3518715,"url":"https://alion.io/job/kbc-global-services-cyber-threat-intelligence-analyst","title":"Cyber Threat Intelligence Analyst","company":{"id":4402786,"name":"KBC Global Services","domain":"kbc-group.com","url":"https://alion.io/company/kbc-global-services","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sofia, Bulgaria"],"countries":["BG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Diamond Model","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-30T09:47:31Z","employer_posted_date":null,"last_verified_at":"2026-10-30T09:47:31Z","board_verified":false,"closed_at":null,"days_open":6,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":6},"description":"KBC Global Services is the engine behind KBC Group – a leading bank-insurance group with over 41,000 talented employees serving more than 12 million clients across Europe. Since 2021, we have been supporting the digital transformation of KBC Group providing software development, QA, AI, and other IT solutions working on a wide range of projects combining classical IT with digital banking.\n\nWelcome to the dynamic world of Cyber Security!\n\nAt the heart of our defense against cyber threats lies the Security Operations Center (SOC). The SOC is composed of several specialized teams, each playing a crucial role in protecting our organization:\n\n• Cyber Threat Intelligence (CTI) gathers data on potential threats, contextualizes it within KBC, and delivers actionable insights to support decision-making and trigger new alerts.\n\n• Use Case Design ensures that our infrastructure is equipped with the right triggers to detect potential threats.\n\n• Security Analysts (T1/T2/T3) investigate alerts when they are triggered.\n\n• Cyber Security Incident Response Team (CSIRT) coordinates the response when alerts escalate into full-scale incidents.\n\nWe are currently looking for a Cyber Threat Intelligence Analyst to join our SOC – The CTI team supports not only the SOC but also a wide range of stakeholders across the organization, each relying on CTI insights for their specific domains.\n\nKey Challenges for CTI in the Short to Medium Term:\n\n• Expanding services to existing stakeholders\n\n• Establishing service delivery for new stakeholders\n\nYour Role as a Cyber Threat Intelligence Analyst:\n\nAs a Security Threat Intelligence Analyst, you will provide intelligence on threats and threat actors, assess the risks they pose to our IT environment, and recommend enhancements to our security controls.\n\nYou will:\n\n• Conduct research on emerging threats relevant to KBC\n\n• Identify and classify threat actors and campaigns\n\n• Prepare and present CTI reports to the KBC Cybersecurity community\n\n• Understand KBC’s critical IT assets and security controls\n\n• Collaborate on threat hunting and use case development\n\n• Analyze adversary tactics and identify gaps in our defenses\n\n• Recommend improvements to our security architecture\n\n• Review and interpret external threat intelligence sources and reports\n\n• Suggest enhancements to detection use cases based on internal and external insights\n\n• Liaise with KBC Group’s CERT to share intelligence and foster collaboration\n\nKey Competencies for Success:\n\n• Strong knowledge of threat impact assessment techniques\n\n• Experience supporting use case design and correlation rule development\n\n• Familiarity with log management and SIEM tools\n\n• Proficiency with commercial and open-source security tools (e.g., EPP, EDR, SIEM)\n\n• Skilled in log analysis using regular expressions and natural language queries\n\n• Understanding of network traffic analysis and packet capture\n\n• Solid grasp of encryption and cryptography\n\n• Familiarity with frameworks like MITRE ATT&CK, Kill Chain, or the Diamond Model is a strong plus\n\nYour Ideal Profile:\n\n• Passionate about cyber security\n\n• Strong understanding of KBC’s IT infrastructure\n\n• Skilled at building partnerships with new stakeholders\n\n• Excellent at researching and synthesizing information\n\n• Able to communicate clearly and effectively to diverse audiences\n\nEven if you only partially match the ideal profile, we warmly encourage you to reach out for an informal conversation — let’s explore together whether a future collaboration could be a good fit.\n\nIf you find this job opportunity interesting and you recognize yourself in the above, apply via the button with your CV & motivational letter in English.","description_format":"text","description_chars":3695,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-30T11:17:29Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.9,"p_room":1,"age_days":5,"expected_fill_days":27,"reasons":["seen:5","velocity","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/kbc-global-services-cyber-threat-intelligence-analyst","json_url":"https://alion.io/job/kbc-global-services-cyber-threat-intelligence-analyst.json","meta":{"generated_at":"2026-11-05T15:50:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20779,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4402786},"rest":"https://alion.io/mcp/rest/get_company?id=4402786"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkbc-global-services-cyber-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkbc-global-services-cyber-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkbc-global-services-cyber-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kbc-global-services-cyber-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkbc-global-services-cyber-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3518715}},{"tool":"search_jobs","arguments":{"company":"kbc-group.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3518715},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}