Sr. Cyber Threat Intelligence Analyst

This is a Non-Employee Contingent Worker Role providing services for TIAA’s family of companies and will be employed by TIAA's preferred 3rd Party Supplier. As a Non-Employee CW, perform a variety of moderately complex business planning, support, and project-related duties. Demonstrates an exceptional standard of quality and holds themselves accountable to achieving excellent results.

This role will sit onsite, likely in a hybrid capacity, at the location(s) listed in this posting.

The anticipated term of this engagement will be 11 months. This term could be extended based on company business needs.

Sr Info Sec Threat Hunting Specialist
The Information Security Threat Hunting Specialist determines and reports threats or hidden events within the enterprise network. Under limited supervision, this job uses defensive measures and information collected from a variety of sources to protect the company's data, information systems and networks. This job also works to improve the existing protection systems by continually monitoring both the internal control environment and the external threat environment. This specialist will identify potential data leaks and determine if an incident constitutes a violation of policies and standards.

Key Responsibilities and Duties

• Determines potential threats, anomalous or malicious activities to network resources by examining and analyzing network traffic.
• Reviews and conducts cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.
• Determines the technical feasibility of adopting external cloud based IT platform and infrastructure services within the organization.
• Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.
• Implements the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.
• Verifies Intrusion Detection System (IDS) alerts as they occur.
• Researches and analyzes various source data sets and identified malicious activities to analyze the root cause and network weaknesses.
• Discovers current weaknesses and exploitation methods, along with the residual effects on IT systems and information through root-cause analysis.
• Reviews reports and documents regarding security incidents details and outcomes.
• Participates in troubleshooting problems and recommending vulnerability conditions.
• Partners with security architecture, network engineering and desktop delivery on implementing and improving security controls.
• Monitors internal and external threat environments on a continual basis to best protect the organization's assets.

Educational Requirements

• University (Degree) Preferred

Work Experience

• 3+ Years Required; 5+ Years Preferred

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level
7IC

Sr. Cyber Threat Intelligence Analyst (Technical)

 

TIAA has an opportunity for a Sr. Cyber Threat Intelligence Analyst. The analyst who is hired into this role will manage the cyber threats specific to financial services such as banking, capital markets, and insurance and would need to have considerable experience in at least one of these industries.

We are seeking a candidate who will utilize their knowledge, skills, and abilities to identify, analyze and mitigate cyber threats that impact TIAA. This role will require you to create Threat Intelligence reports to share with relevant stakeholders and senior leadership. This role will conduct research, analyze, and report on cyber defense, technology, cyber threat actors and groups, and related political and economic conditions. In addition, this role will collaborate with both industry specialists and peer analysts, develop, and maintain both short- and long-term research projects, create completed intelligence for tactical and executive audiences, and present the findings through briefings and external engagements.

Key Responsibilities and Duties

• Discover, identify, and report regularly on significant cyber threats and risks to businesses, governments, and other organizations presented by cyber threat actors and groups originating in global regions.
• Knowledge of zero-day vulnerabilities and writing a report for vulnerabilities along with mitigations/ remediations.
• Devel