Senior Threat Intelligence Analyst

Role Summary
The Senior Cyber Threat Analyst – Threat Intelligence is responsible for collecting, curating, classifying, reporting, and analyzing cyber threat intelligence to support internal security operations, IT teams, enterprise risk management, and executive leadership.

This role involves active collaboration with external partners and cyber intelligence sharing groups to both disseminate and gather intelligence on relevant cyber threats.

The analyst will leverage intelligence data to help internal teams proactively identify, assess, and communicate potential threat actor activities that could impact the firm’s interests.

Responsibilities

• Continuously monitor and investigate cyber-enabled threats to the firm, including activity from financially motivated and nation-state-aligned threat actors.
• Collaborate with legal, HR, insider threat, cybersecurity operations, and fraud teams by providing timely intelligence and support.
• Track and analyze threat actor tactics, techniques, and procedures (TTPs) targeting the financial services sector.
• Produce intelligence reports on adversarial attempts to compromise personnel, vendors, or information systems.
• Maintain awareness of adversarial use of contractors, front companies, and proxy personnel (e.g., DPRK or Iranian IT workers) and assist with due diligence and third-party risk assessments.
• Develop and maintain intelligence requirements, collection plans, and risk assessments aligned with the Cyber Threat Intelligence (CTI) team’s objectives.

Business Knowledge

• Able to articulate cybersecurity risks and translate them into actionable solutions for technology teams.
• Deep understanding of the goals and objectives of a cyber analysis program.

Qualifications

Required:

• 5+ years of experience in cyber threat intelligence, incident response, or related cybersecurity fields.
• Experience with APT tracking, open-source intelligence (OSINT), dark web research, and threat actor attribution.
• Familiarity with nation-state adversary TTPs (e.g., PRC, Russia, Iran, DPRK) targeting financial institutions.
• Proven ability to work with cross-functional teams, including legal, compliance, HR, and IT.
• Excellent communication and analytical writing skills, with the ability to brief senior leadership clearly and effectively.

Preferred:

• Proficiency in threat hunting and detection engineering enablement through intelligence-derived hypotheses and context. 
• Strong technical acumen in network forensics, malware analysis, and cloud/endpoint telemetry analysis. 
• Skilled in intelligence reporting, stakeholder engagement, and executive communication. 
• Experience leveraging threat intelligence platforms (TIPs), SIEMs, and enrichment tools (MISP, Splunk, VirusTotal). 
• Experience working in a 24x7 global enterprise, ideally within the financial sector.
• Bachelor’s degree in Cybersecurity.
• Certifications such as GCTI, GOSI, CISSP, or Security+.
• Knowledge of regulatory requirements (e.g., FFIEC, NYDFS, FINRA) related to threat intelligence and risk reporting.

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for hybrid work, with up to three days per week from home.