{"id":2253785,"url":"https://alion.io/job/nttdata-threat-analyst","title":"Threat Analyst","company":{"id":4401319,"name":"NTT DATA Romania","domain":"nttdata.ro","url":"https://alion.io/company/nttdata-ro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brașov, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":31000,"max_usd":74000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":613},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Anomali","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"ThreatConnect","optional":false}],"status":"live","first_seen_at":"2026-09-26T02:00:00Z","employer_posted_date":"2026-09-26","last_verified_at":"2026-10-12T03:50:46Z","board_verified":true,"closed_at":null,"days_open":16,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":16},"description":"Who we are\nNTT DATA is one of the world's largest global security service providers, partnering with some of the most recognized security technology brands. We're looking for passionate, curious, and motivated individuals to join our team.\nWhat you’ll be doing\nResearch, track, and analyze Indicators of Compromise (IOCs) and threat actor profiles using sources that include open-source (OSINT), dark web forums, government feeds, and commercial intelligence platforms.\nConduct detailed analysis of Threat Actor Tactics, Techniques, and Procedures (TTPs) and malware.\nDeliver actionable intelligence insights to enhance detection, prevention, and response embedded within the threat lifecycle.\nDevelop and deliver weekly threat briefs, annual landscape overviews, and ad-hoc risk signals for both technical and non-technical audiences.\nProduce detailed reports based on industry-specific campaigns or identified vulnerability patterns.\nCommunicate emerging threats to relevant technical stakeholders, influencing rapid mitigation strategy formulation.\nIntegrate threat intelligence feeds (TIPs) into platforms like SIEM or SOAR, prioritizing automation workflows where required.\nTrack and assess malware campaigns, underground forums, and marketplaces to identify emerging attack vectors.\nAnalyze threat data to produce predictive insights about probable trends and future adversarial strategies.\nRepresent NTT DATA at external security forums and intelligence-sharing communities.\nWhat you'll bring along\nBachelor’s degree in Cybersecurity, Computer Science, International Relations, or Intelligence Studies strongly preferred.\nMinimum 3-5 years of experience in cybersecurity or IT security roles.\nAdvanced scripting capabilities (Python, PowerShell preferred)\nStrong proficiency with threat intelligence platforms like MISP, ThreatConnect, or Anomali, Security Alliance\nDeep familiarity with MITRE ATT&CK framework, dark web monitoring techniques, and attack simulation techniques.\nDemonstrated skills in cyber threat modeling, malware reverse engineering, and API-triggered automation\nStrong analytical and problem-solving abilities.\nExcellent written and verbal communication skills.\nAttention to detail and accuracy in technical analysis.\nDirect experience working in government, military, or intelligence organizations advantageous.\nExperience identifying and neutralizing Advanced Persistent Threats (APTs) in target environments\nCREST Practitioner Security Analyst (CPSA), GCTI, MITRE ATT&CK CTI or related.\nExcellent command of both spoken and written English.","description_format":"text","description_chars":2570,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-11T03:22:23Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.735,"p_room":0.9,"age_days":16,"expected_fill_days":24,"reasons":["conf:3","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/nttdata-threat-analyst","json_url":"https://alion.io/job/nttdata-threat-analyst.json","meta":{"generated_at":"2026-10-12T07:15:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11753,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4401319},"rest":"https://alion.io/mcp/rest/get_company?id=4401319"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnttdata-threat-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnttdata-threat-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnttdata-threat-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nttdata-threat-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnttdata-threat-analyst"}]}