Senior Cyber Threat Intelligence Advisor

Company

Federal Reserve Bank of Richmond

When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic team for our future.

Bring your passion and expertise, and we’ll provide the opportunities that will challenge you and propel your growth—along with a wide range of benefits and perks that support your health, wealth, and life. In addition to competitive compensation, we offer a comprehensive benefits package that includes tuition assistance, generous paid time off, top-notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more. All brought together in a work environment where you can truly find balance.

About the Opportunity

The National Incident Response Team (NIRT), a national service provider for the Federal Reserve System (FRS), delivers effective and efficient national intrusion detection, incident response, security intelligence, threat assessment, and vulnerability assessment services for the FRS. NIRT brings together experts across multiple disciplines to deliver cross-functional, cybersecurity services to support the protection of mission-critical applications and systems that support market operations, financial institution supervision, services to banking organizations, services to the U.S. Treasury Department, and internal FRS operations.

NIRT is seeking an enthusiastic and experienced cyber threat intelligence or information security professional to serve as a Senior Cyber Threat Intelligence (CTI) Advisor on a team composed of 12 CTI Advisors and Analysts. This role is responsible for providing primarily tactical and operational cyber threat intelligence services, including providing tactical support to NIRT Incident Response and Adversary Emulation teams, providing new TTPs for monitoring to the Detection Engineering team, conducting engineering and automation in support of CTI collection operations, and prioritizing vulnerabilities and making recommendations to vulnerability management professionals. This role is also responsible for producing daily, quarterly, and ad hoc intelligence reports, as well as occasionally briefing analysis and assessments to FRS stakeholders, in an effort to improve the overall security and cyber defenses of the FRS in relation to current and future cyber threats. Finally, this role will be expected to perform highly complex analysis, leveraging internal and external data sources, with little to no supervision; identify opportunities and support projects to improve the maturity of the team’s products and services; and mentor more junior team members.

What You Will Do

• Assist leadership in developing strategy and direction for the CTI service, leading to continuous improvement and maturation of the team’s products and services

• Leverage experience in the intelligence, cybersecurity, or information security domains to coach and mentor junior staff

• Generate effective and innovative solutions to support and lead through organizational change

• Demonstrate strong interpersonal and networking skills in connecting with customers, partners, and peers

• Review intelligence reporting and determine relevance for the FRS and specific customers, including evaluating content for future NIRT action (i.e., detection, response, assessment, or emulation)

• Triage and evaluate intelligence reporting for relevance, based primarily on customer intelligence requirements

• Conduct complex analysis and communicate relevant cyber threat intelligence, including on evolving threats, to customers and business leaders, translating the information into risk-based guidance whenever possible

• Optimize the cyber intelligence lifecycle; manage delivery of core intelligence services; and develop cross-team initiatives to implement cybersecurity improvements for recognized gaps

Qualifications:

• Bachelor’s degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, Systems Analysis, or a related field required. Master’s degree in Computer Science, Information Systems, Computer Engineering, Cybersecurity, Systems Analysis, or a related field is preferred.

• 8+ years of experience in cybersecurity, preferably in Security Operations, Incident Response, Digital Forensics, Threat Intelligence, or Threat Hunting.

• Expert ability to analyze cyber threat activity and develop relevant recommendations.

• Firm understanding of common fr