Skip to content

Open nowFirst seen 2 days ago

Threat Operations Analyst

George Bernard Consulting185 open roles

Where
Colombo, Sri Lanka
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowThreat Operations AnalystGeorge Bernard Consulting · Colombo, Sri Lanka
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on George Bernard Consulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 2 days ago

The posting

Threat and Vulnerability Analysis

  • Review and analyse threats, risks, and vulnerabilities surfaced by the
  • Research Team and cyber detection pipelines.
  • Validate the presence of exposed services (e.g., RDP, SSH, databases, edge devices) using platforms such as Shodan, Censys, LeakIX, and Nuclei scans.
  • Evaluate security configurations to determine whether mitigating controls or compensating measures are in place.

Asset Verification and Attribution

  • Confirm internet-facing asset ownership using WHOIS, DNS lookups, reverse- DNS checks, TLS fingerprinting, Shodan datasets, and related OSINT techniques.
  • Resolve attribution uncertainties, ensuring customers only receive notifications for confirmed assets.

Customer Notification and Advisory Work

  • Produce clear and concise security alerts, including explanations of the issue, affected assets, recommended remediation steps, and references to vendor guidance.
  • Communicate directly with customers and brokers to explain findings, clarify risks, and guide remediation priorities where necessary.

Internal Collaboration and Escalation

  • Act as a technical escalation point for Customer Support, Underwriting, and Claims teams.
  • Investigate inbound queries relating to exposed services, flagged vulnerabilities, potential false positives, or disputed asset ownership.
  • Contribute technical insight to improve internal processes, detection workflows, and knowledge sharing across teams.

Operational Excellence

  • Maintain a high standard of customer service, ensuring communications are professional, timely, and approachable.
  • Assist in tuning detection logic and improving the accuracy of vulnerability and exposure matching.
  • Support the continuous improvement of intelligence capabilities and processes.

Required Skills and Knowledge

  • 5 + years experience
  • Strong understanding of networking fundamentals (TCP/IP, ports, protocols, common services).
  • Familiarity with cyber security terminology (CVE, CVSS, threat actor TTPs, exploitation lifecycle, attack surface concepts).
  • Hands-on experience using internet scanning or exposure assessment tools (e.g., Shodan, Censys, LeakIX, Nuclei).
  • Ability to interpret DNS records, WHOIS data, HTTP response headers, and other OSINT artefacts.
  • Able to break down complex technical issues into clear, customer-friendly language.
  • Proven track record in an MSSP, SOC, threat monitoring or security operations role.
  • Experience triaging or validating vulnerabilities, exposures, misconfigurations, or security alerts.

Certifications (Desired but Not Essential)

  • CompTIA Security+ (or equivalent vendor-neutral foundational certifications).
  • Other relevant certifications (e.g., Network+, CySA+, GIAC, eLearnSecurity, or similar) welcomed.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against George Bernard Consulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on George Bernard Consulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    George Bernard Consulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.