What does a threat analyst do?

Key Takeaways

so um so you essentially help these companies out like you you come in and like help them i guess do a penetration test and and then build up their security in a way so truthfully my role is a lot of uh incident response um and managed threat detection so when more managed detection than it is incident response uh we sort of just do that because it's fun uh when we see malware on an endpoint when we see hacker activity like oh there's there's a back door or there's some persistent access with an implant or a hook on the computer we'll notify that that business and that organization and we'll help them get it out so it's really cool and really interesting because it takes all the stuff that i learned in capture the flag and makes it more real world and i hate i hate that terminology when people talk about that because sure ctf could be a game it could be a puzzle or a toy but you still learn real world things and when you do it for a day job of is this organization gonna get hacked or not and how can i prevent that you see the techniques that you learn there and it brings it to a whole nother level when you're talking about ransomware you're talking about actual malware actual denial of service attacks actual website defacement bots and remote access trojans mining for cryptocurrency weird weird stuff right and i think that's a cool bridge to cross and i'm really happy with that that's what motivates me now is i feel like i'm making a difference doing the cyber security stuff both in educating people and bringing the right security stuff to the right people