Job Information
Maintain threat actor profiles and/or develop and maintain intelligence requirements to track adversaries’ tactics, techniques and procedures; capabilities; and intent. Periodically produce and conduct briefings or presentations for all levels, up to the Board of Directors level. Identify, develop, and productively leverage intelligence sharing relationships with EO 13636 Critical Infrastructure, Sec. 9, Financial Services systemic risk partners.
Key Job Functions
Report to the Cyber Intelligence Team manager in Information Security’s Threat Detection and Response directorate to provide highly credible, timely, accurate, and relevant cyber intelligence services to security operations and senior executives.
Lead/assist with integrating cyber risk methodologies into a strategic cyber intelligence program.
Identify and develop technical/operational knowledge or maintain relationships with appropriate internal subject matters experts to enable credible authorship of intelligence and risk products on complex internal business platforms, integrations, and controls.
Support threat detection team with analysis and technical data to prioritize malware/threats and assist with detection methodologies and rules.
Specialized Knowledge & Skills
Experience with ArcSight, ThreatConnect, Anomali ThreatStream, FirePower (Sourcefire), Amazon Web Services (AWS), Recorded Future, RiskLens.
Experience with Factored Analysis of Information Risk (FAIR) or COSO methodologies.
Basic proficiency with Python and API integrations with threat intelligence tools.
All your information will be kept confidential according to EEO guidelines.