EQUANS 

Equans is a world leader in the energy and services sector, with annual revenues of nearly €19,2 billion* and almost 800,000 projects.​ 

Equans has leading positions in Europe, which is the result of the history of energy construction in these countries, and strong presences in North and South America and in Oceania.​ 

With nearly 90,000 highly skilled employees, Equans has a strong geographic footprint, anchored by historic local brands. Equans provides its customers with excellent technical expertise in the design, installation, maintenance, and operation of multi-technical facilities. This know-how is based on key skills. First of all, in electrical and thermal engineering - two strong points that help accelerate the reduction of our clients' carbon footprint - but also in ventilation, refrigeration, mechanics and robotics, fire protection, energy renovation, digital solutions, IT, cyber security and telecommunications.​ 

The combination of these expertises allows us to offer efficient and optimised solutions at all stages of the energy chain, from production, storage and transport to usage. 

(*) Turnover 2024 consolidated 

CTI ANALYST  

Summary of the role 

 
The CTI Analyst is a senior, business‑oriented cybersecurity intelligence professional responsible for producing high‑value threat intelligence to support executive decision‑making and defensive prioritization across the Group. 

Embedded within the Active Defense CTI Pole, this role combines: 

• Strategic CTI, focused on long‑term threat assessment, business risk interpretation, and strategic foresight for executive leadership, and  

• Tactical CTI, focused on translating threat intelligence into clear defensive priorities for security stakeholders. 

While remaining strictly non‑operational (no IOC handling, no real‑time incident response - these are handled by the CSIRT Threat Management). 

Strategic stakeholders 

• Executive leadership (COMEX) 

• Group & Entity CISOs 

• Growth and M&A leadership (cyber due diligence) 

Tactical stakeholders 

• CSIRT / Threat Management 

• Offensive Security 

• Vulnerability Operation Center 

• Group & Entity CISOs (in their defensive leadership role) 

The role translates complex cyber threats into clear, actionable insights that influence: 

• Strategic priorities and investments 

• Risk appetite and governance decisions 

• Defensive focus areas and security roadmaps 

• Acquisition and integration decisions 

in line with the Group cyber strategy and exposure management objectives. 

 
 
KEY RESPONSIBILITIES 

1. Executive Level Threat Intelligence & Decision Support (Strategic)

• Produce high level strategic threat intelligence tailored for executive audiences (COMEX). 

• Identify macro trends, structural shifts, and long term threat scenarios impacting business operations, reputation, and growth. 

• Assess likelihood, impact, and risk trajectories across geographies, sectors, and Group activities. 

• Provide decision oriented recommendations supporting prioritization, investment decisions, and risk tolerance. 

2. Strategic & Tactical Threat Landscape for CISOs and Security Leadership

• Deliver sector based and geographic threat landscapes aligned with EQUANS’ activities, value chains, and exposure. 

• Analyze threat actors and ecosystems:  

• Cybercrime and ransomware groups 

• State sponsored actors 

• Hacktivist and hybrid threat actors 

• Translate strategic intelligence into tactical threat understanding by:  

• Analyzing adversary TTPs and attack patterns 

• Mapping threat behavior against Group relevant attack surfaces 

• Map threats against key security domains:  

• Identity & Access 

• Cloud & data 

• Supply chain & third parties 

• Support CISOs in defining:  

• Multi year security roadmaps 

• Control priorities 

• Defensive focus areas grounded in real threat activity 

3. Tactical CTI: Defense Prioritization for Security Teams

This responsibility explicitly supports CSIRT, Offensive Security, Vulnerability Management, and CISOs. 

• Provide tactical threat intelligence to guide defensive prioritization across the cyberdefense functions. 

• Analyze:  

• Adversary kill chains and exploitation paths 

• Exploitation velocity and campaign maturity 

• Threat relevance to Group exposure and asset criticality 

• Translate threat intelligence into clear tactical priorities for:  

• Vulnerability Management 

• CSIRT / Threat Management 

• Offensive Security 

• CISOs 

• Contribute to exposure driven decision making across:  

• Vulnerability management 

• External attack surface management (EASM) 

• Security control reinforcement 

4. M&A Cyber Due Diligence & Strategic Investigations

• Conduct cyber risk assessments of acquisition targets based on: 

• External exposure and attack surface indicators 

• Public incident history and breach signals 

• Apparent security posture and technical debt 

• Integrate tactical threat signals (sector targeting, active exploitation trends, known adversary interest) into due diligence analysis. 

• Identify strategic and tactical red flags affecting valuation, integration risk, and post‑acquisition security effort. 

• Produce executive‑level due diligence notes and risk summaries. 

5. Strategic & Tactical Deliverables & Reporting

• Produce and maintain key CTI outputs: 

• Executive Threat Briefs (monthly / quarterly) 

• Strategic & Tactical Threat Landscape Reports 

• M&A / Due Diligence Cyber Notes 

• Position papers on emerging and actively exploited threats 

• Ensure intelligence products are: 

• Decision‑oriented 

• Actionable for security leadership 

• Clearly adapted to executive vs defensive audiences 

6. CTI Governance, Interfaces & Alignment

• Contribute to the definition and maintenance of the corporate CTI editorial line: 

• Key messages 

• Intelligence priorities 

• Target audiences 

• Standardize formats for executive and security leadership consumption. 

• Act as the strategic and tactical interface with the CSIRT Threat Management 

• Consume ground‑level intelligence to produce: 

• Strategic synthesis for executives 

• Tactical prioritization for security teams 

• Ensure continuous alignment between: 

• Observed threat activity 

• Defensive priorities 

• Group cyber strategy 

PROFILE  

Experience  

• Minimum of 5 years’ experience as a Threat Intelligence analyst 

• Proven exposure to executive‑level reporting and stakeholder engagement. 

• Experience with:  

• Strategic cyber risk analysis 

• Tactical threat analysis (TTPs, exploitation trends) 

• Business impact assessment or cyber due diligence is strongly valued. 

• Prior work in consulting, large enterprises, or critical infrastructure environments is a plus. 

Core Skills 

• Strong ability to translate technical threats into business and strategic language.  

• Analytical mindset with structured reasoning (probability, impact, scenarios).  

• Excellent written communication skills for C‑level and Board audiences.  

• Solid understanding of:  

• Cyber threat ecosystems 

• Ransomware and cybercrime economics 

• State‑sponsored and geopolitical cyber risks 

Soft Skills 

• Strategic thinker with a long‑term vision of cyber risk. 

• Credible, calm, and impactful when interacting with senior leadership. 

• High standards of rigor, clarity, and relevance. 

• Collaborative, able to work across entities and discipline 

• Ability to operate autonomously and manage sensitive topics with discretion. 

Why Join Us? 

• Global Impact: Influence identity governance across a multinational company. 

• Challenging Projects: Work on cutting-edge IGA initiatives with real business impact. 

• Career Growth: Opportunity to evolve into IAM leadership or architecture roles. 

• Collaborative Culture: Work with experts in cybersecurity, cloud, and compliance.