Senior Analyst, Cyber Threat Intelligence Fusion

General information

Career area Technology Work Location(s) 500 Woodward Avenue, MI, 601 S. Tryon Street, NC City Charlotte, NC Remote? Yes Ref # 22039 Posted Date 04-22-26 Anticipated Application Closing Date 05-05-26 Working time Full time

Ally and Your Career

Ally Financial only succeeds when its people do - and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?
Work Schedule: Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

The Opportunity

The Senior Cyber Threat Intelligence Fusion Analyst is a valued member of the Information Protection and Risk Management (IPRM) organization. This role is responsible for enabling intelligence-driven security operations through the production of intelligence products that are timely, relevant, and actionable to Ally. You will collaborate with key stakeholders across the organization to enhance and influence their security programs through advanced intelligence solutions. You will have the opportunity to study emerging threats and build forecasts that ultimately translate into improved security controls. Our goal in Cyber Threat Intelligence is to equip the organization with knowledge that enables proactive cyber defense – and we welcome you to join us in that mission.

The Work Itself

• Use Security Information and Event Management (SIEM) tooling to analyze authentication and security telemetry across diverse sources to assess the relevance of threats to the environment and generate viable threat mitigation recommendations.
• Fuse cyber threat intelligence with enterprise data to generate insights for business, fraud, AML, and security teams that enhance detection and