Cybersecurity Threat Intelligence Analyst

The Bank sponsors individuals for TN and H-1B transfers on a case by case basis. Please note that this position is not open to anyone on an F-1 student visa including those eligible for CPT/OPT or the Stem OPT extension.

About M&T Bank

At M&T Tech, we’re a team of makers, doers, and builders, working to create the most advanced technology solutions in banking.  We’re not your stereotypical suit and tie bankers: we’re an innovative team of leading tech experts, pushing boundaries, and taking risks.  We’re building an agile team of the most skilled and creative workers to solve complex problems, architect solutions, write high-performance software, and chart our new path, all to make the lives of our customers, and the communities that we serve, better.  Join us and be part of something new as we build tomorrow’s bank, today.

Overview:

As Threat Intelligence Analyst, you will play a vital role in safeguarding the Bank against cyber threats by supporting the development, implementation, and execution of various cybersecurity threat intelligence initiatives, systems, and processes. Your responsibilities will include maintaining an in-depth knowledge of intelligence collection methods, conducting technical analysis, and facilitating the dissemination of threat intelligence to relevant stakeholders.

Primary Responsibilities:

It will be essential for you to maintain an up-to-date understanding of intelligence collection methods, technical analysis techniques, and the dissemination of threat intelligence. This expertise will enable you to effectively identify and mitigate cyber threats.

Leverage your understanding of technical concepts to analyze and assess the impact of cybersecurity threats on the Bank's infrastructure and operations. Your analytical skills will be crucial in identifying emerging threats and vulnerabilities. You will assess new vulnerabilities and make actionable recommendations for remediation.

Create comprehensive threat reports for new and emerging threats to the Bank. Draft actionable intelligence for relevant stakeholders to drive operations in cybersecurity and throughout the bank. Additionally, you will review threat reports before dissemination to ensure accuracy and relevance. Demonstrating excellent written and verbal communication skills to effectively communicate complex technical concepts to non-technical stakeholders. Experience in preparing and presenting threat intelligence reports, briefings, and recommendations to senior management.

You will actively contribute to the development, implementation, and execution of cybersecurity threat intelligence initiatives, systems, and processes. Your insights will help enhance the Bank's cyber defense capabilities.

Interact with various internal and external audit, regulatory, privacy, and/or compliance personnel as needed. Interact with outside teams and external professional organizations supporting areas of expertise as needed. Assist with documenting and communicating proposed new approaches, methods, technologies, or breakthroughs in area of expertise. Ability to collaborate with cross-functional teams including IT security, incident response, and risk management.

Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite.  Identify risk-related issues needing escalation to management.

Promote an environment that supports diversity and reflects the M&T Bank brand. Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.

Complete other related duties as assigned.

Scope of Responsibilities:

This position works under general supervision while being afforded opportunity to exercise independent judgment and discretion.  This requires the position to interact regularly with non-management, middle management, certain senior management, and business units and partners.

Education and Experience Required:

Associate’s degree and a minimum of 3 years’ relevant work experience in three or more of these Cybersecurity domains:  Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations, or in lieu of a degree, a combined minimum of 5 years’ higher education and/or work experience, including a minimum of 3 years’ relevant work experience in three or more of these Cybersecurity domains:  Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations

Prior experience completing complex problem analysis and problem resolut