CTI Analyst

Job description

Job Description The Cyber Threat Intelligence (CTI) team is looking for an analyst to join us. You’ll be part of a diverse, global team working together to protect our organization by turning data and information into actionable intelligence. In this role, you’ll be involved in the full intelligence cycle—from collecting information, analyzing it, to delivering it to the right stakeholders in a clear and actionable way—with a strong focus on vulnerabilities and their real-world exploitation by threat actors. Your work will help us understand the evolving threat landscape, identify which vulnerabilities matter the most based on active exploitation, and strengthen our ability to detect and respond to threats in our environment. You’ll engage with a broad range of stakeholders, from highly technical teams to colleagues with diverse business backgrounds, collaborating across internal departments and with external partners. What you’ll do: Monitor and assess threat intelligence landscape, specially related to vulnerabilities actively exploited by threat actors. Evaluate exploitation prerequisites for vulnerabilities and potential impact on our environment. Correlate vulnerability intelligence with internal asset and exposure data to assess organizational risk. Proactively hunt for evidence of exploitation of high-risk vulnerabilities, including retrospective analysis to identify potential compromise prior to patching. Collaborate closely with incident response and vulnerability management teams. Brief stakeholders and leadership on threats, trends, and vulnerability-driven risks. Respond to high-priority requests for information from stakeholders. Gather and analyze information from a variety of internal and external sources. Assess and test new tools and capabilities to improve CTI and vulnerability intelligence workflows. Identify and drive process improvements, particularly in vulnerability intelligence integration with detection and response. What we’re looking for: Understanding of vulnerabilities, exploitation techniques, and common attack paths. Ability to assess exploitability (e.g., prerequisites, exposure, weaponization) rather than relying solely on severity scores. Experience with threat hunting, log analysis, or working with security telemetry (e.g., SIEM, EDR). Strong written and verbal communication skills — you know how to explain complex things clearly. A good understanding of Cyber Threat Intelligence processes and the intelligence lifecycle. Ability to work both independently and as part of a global team. Curiosity, self-motivation, and a desire to keep learning. A creative mindset — you enjoy finding new ways to solve problems or improve processes. A degree in computer science, international security, or another relevant field (or equivalent experience). What we offer Exciting work in a great team, global projects, international environment Opportunity to learn and grow professionally within the company globally Hybrid working model, flexible role pattern Competitive salary & incentive pay Pension and health insurance contributions Internal reward system and referral scheme 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport Card Vodafone, Raiffeisen Bank, Foodora, and discount programmes Up-to-date laptop and iPhone Parking in the garage, showers, refreshments, massage chairs, library, music corner Ready to take up the challenge? Apply now! Know anybody who might be interested? Refer this job! Required Skills: Communication, Cross-Team Coordination, Cybersecurity Analytics, Cyber Threat Hunting, Cyber Threat Intelligence, Digital Forensics, Global Team Collaboration, Log Analysis, Oral Communications, Patching, Penetration Testing, Process Improvements, Risk Assessments, Security Operations, SLA Management, Teamwork, Vulnerability Scanning, Working Independently Preferred Skills: Current Employees apply HERE Current Contingent Workers apply HERE Search Firm Representatives Please Read Carefully Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails. Employee Status: Regular Relocation: VISA Sponsorship: Travel Requirements: Flexible Work Arrangements: Hybrid Shift: Valid Driving License: Hazardous Material(s): Job Posting End Date: 08/1/2026*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.