Senior Cybersecurity Threat Intelligence Analyst

The Bank sponsors individuals for TN and H-1B transfers on a case by case basis. Please note that this position is not open to anyone on an F-1 student visa including those eligible for CPT/OPT or the Stem OPT extension.

This role offers a hybrid work schedule; offering the flexibility to work from home two days a week, while providing the opportunity for in-person collaboration.

**This position is available in Buffalo, NY**

About M&T Bank

At M&T Tech, we’re a team of makers, doers, and builders, working to create the most advanced technology solutions in banking.  We’re not your stereotypical suit and tie bankers: we’re an innovative team of leading tech experts, pushing boundaries, and taking risks.  We’re building an agile team of the most skilled and creative workers to solve complex problems, architect solutions, write high-performance software, and chart our new path, all to make the lives of our customers, and the communities that we serve, better.  Join us and be part of something new as we build tomorrow’s bank, today.

Overview:

We are seeking a highly skilled and experienced Senior Cyber Threat Intelligence Analyst to join our threat intelligence team. As a subject matter expert (SME) in cybersecurity threat intelligence, you will play a crucial role in enhancing the security posture of our bank. Your deep technical knowledge and understanding of vulnerability analysis will be essential in identifying, analyzing, and mitigating cyber threats.

Primary Responsibilities:

• Serve as the primary technical authority in cybersecurity threat intelligence, possessing a comprehensive understanding of how information translates into key risk decision-making within the organization.
• Drive the development, implementation, and execution of various cybersecurity threat intelligence initiatives, systems, and processes to proactively identify and respond to emerging threats.
• Maintain proficiency in intelligence collection methods, technical analysis, and dissemination of threat intelligence. Utilize advanced technical concepts to effectively analyze and assess the impact of cybersecurity threats to our organization.
• Assist in the creation of comprehensive threat reports detailing new and emerging threats to the organization. Review and approve threat reports before dissemination to ensure accuracy and relevance.
• Leverage intelligence and lead the monitoring for vulnerabilities and respond accordingly, including the development of risk mitigating approaches; as a continuous feedback loop, incorporate learnings into additional detective controls; define security configuration for monitoring tools, including alerts, and reporting; leverage a combination of vendor products and services, open source.
• Research, analyze, and track cyber threat actors and their tactics, techniques, and procedures (TTPs) to identify potential threats to the organization. Develop and maintain threat actor profiles to enhance proactive threat detection and response capabilities.
• Collaborate with cross-functional teams to share intelligence, insights, and best practices to enhance the overall cybersecurity posture of the organization.
• Understand and adhere to the bank’s risk and regulatory standards, policies and controls in accordance with the bank’s risk appetite. Identify risk-related issues needing escalation to management. Work with the Cybersecurity team to ensure compliance with best practices and regulatory requirements.
• Assist with documenting and communicating proposed new approaches, methods, technologies, or breakthroughs in area of expertise.

Education and Experience Required:

Associates’ degree in an applicable discipline and a minimum of 6 years’ relevant work experience in two (2) or more of the following Cybersecurity domains:  Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations, or in lieu of a degree, a combined minimum of 8 years’ higher education and/or work experience, including a minimum of 6 years’ relevant experience in two (2) or more of the following Cybersecurity domains:  Security and Risk Management, Asset Security, Security Engineering, Communication and Network Security, Identity and Access Management, Security Testing and Security Operations.

Proficiency in intelligence collection methods, technical analysis, and dissemination of threat intelligence.

Strong understanding of cybersecurity frameworks, standards, and best practices.

Excellent communication and presentation skills, with the ability to convey complex technical information to both technical and non-technical stakeholders.

Relevant certifications such as CISSP, CEH, or GIAC certifications are highly desirab