We have one vision. To B-one of a kind. To #B-one-of-a-kind and become a reliable technology partner to our business and an attractive workplace, driven by a culture of innovation, technical competence and quality. B-INFINIT by BNP Paribas.
BNP PARIBAS, the leading bank in the European Union and a leading international player, is seeking to complement and reinforce its existing teams in the areas of IT risk management, cybersecurity, and the fight against digital fraud.
Within IT Group, Informatics Directorate of BNP Paribas, the Cybersecurity & Digital Fraud Department’s mission aims to structure, strengthen, and harmonize IT risk management and cybersecurity for the overall BNP Paribas Group (approximately 30 entities) and:
- defining the vision and strategy for IT risk management and cybersecurity, and ensuring the implementation of this strategy within the Group’s operating entities,
- monitoring the security of the Group’s information systems,
- steering the IT Continuity and Resilience strategy and methodological framework.
The evolving Cyberthreats landscape increases the security risk of financial sector, which leads BNP Paribas to strengthen its Cybersecurity maturity, IT risk management and Operation Resilience.
Within IT Group Cybersecurity & Digital Fraud department, you will be part of the Fusion Center team in Poland.
You will play a key role to develop Poland platform, ensuring core Cybersecurity, IT Risk and Operational Resilience activities are performed with the required efficiency and quality to protect BNP Paribas.
Threat Intelligence Analyst
Requirements:
- At least 3 years of experience in similar position (IT Security and Cyber Security), including SOC/CSIRT cooperation and use of a common threat intelligence platform software
- Ability to identify potential threats and indicators of compromise using threat intelligence analysis techniques and ability to write relevant detailed reports;
- Detailed knowledge of vulnerability scoring standard CVSS v3 and v4, and common frameworks used in CTI like: STIIX, TAXII, MITRE ATT&CK, Kill Chain, DIAMOND;
- Understanding of common attack vectors, techniques and countermeasure /defense techniques as well as the concept of malware sample analysis;
- Understanding of common endpoint and network security solutions (network architecture, firewalls, endpoint protection, IDS/IPS, log collecting and analysing, SIEM/SOAR);
- Excellent written and verbal communication skills in English;
- Level of education: Master’s degree or equivalent experience.
Responsibilities:
- Enhancing the detection and management of cybersecurity incidents by analysing intelligence on cyber-attacks from various public and private sources.
- Conducting technical and organizational workshops with different experts internationally. Assisting business units and managers with cyber threat intelligence issues.
- Providing technical support and serving as a reference point on specific topics. Supporting the management and deployment of various services implemented and subscribed to by the group.
- Acquiring and disseminating expertise in the field of cyber threat intelligence.
What we offer:
- Hybrid work mode, 60% working from home within a month
- Equivalent for remote work expenses (120 PLN per month)
- Stable employment in the international company
- Fully paid private medical care for employee
- Pre-paid lunch card
- Employee Pension Plan
- Co-financed Multisport Card
- MyBenefit Cafeteria Platform
- Life insurance
- Car parking availability in the office building
- Trainings and development opportunities