The Senior Cyber Security Analyst - Threat Intelligence analyst role supports cyber threat intelligence collection, curation, classification, reporting, and analysis of data to support internal security operations teams, information technology teams, enterprise risk management teams, and executive decision makers.
This role will coordinate with external peers and cyber intelligence sharing groups to share and consume intelligence data surrounding relevant cyber threats.
This role will also leverage intelligence data to support and assist internal teams by proactively identifying, assessing, and presenting intelligence related to threat actor activity that could harm the firm’s interests.

Responsibilities

• Monitor and investigate cyber-enabled threats against the firm, including activity related (but not limited) to financially motivated threat actors (including nation-state-aligned actors).
• Collaborate with legal, HR, insider threat, cybersecurity operations, and fraud teams by providing support and timely intelligence.
• Identify and monitor for threat actor TTPs (tactics, techniques, and procedures) targeting the financial services industry.
• Produce intelligence reporting on adversaries’ efforts to infiltrate or manipulate personnel, vendors, or information systems.
• Maintain awareness of adversarial use of contractors, front companies, and proxy personnel (e.g., DPRK or Iranian IT workers) and support due diligence and third-party risk assessments.
• Develop and maintain intelligence requirements, collection plans, and risk assessments tied to the CTI team.

Business Knowledge:

• Can articulate cyber security risk and translate into practical solutions to technology teams
• Thorough knowledge of the cyber analysis program associated objectives

Qualifications

Required:

• 5+ years of experience in cyber threat intelligence, incident response, or other relevant cyber fields.
• Experience with APT tracking, open-source intelligence (OSINT), dark web research, and threat actor attribution.
• Familiarity with adversary TTPs from nation-state actors (e.g., PRC, Russia, Iran, DPRK) targeting financial institutions.
• Demonstrated experience working with cross-functional teams, including legal, compliance, HR, and IT.
• Strong communication and analytical writing skills — able to brief senior leadership with clarity and relevance.

Preferred:

• Experience in a 24x7 global enterprise, preferably in the Financial industry.
• Bachelor’s degree in Cybersecurity.
• Certifications such as GCTI, GOSI, CISSP, or Security+ are a plus.
• Familiarity with regulatory requirements (e.g., FFIEC, NYDFS, FINRA) regarding threat intelligence and risk reporting.

FINRA Requirements

FINRA licenses are not required and will not be supported for this role.

Work Flexibility

This role is eligible for full time remote work.

Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States (e.g., H1-B visa, F-1 visa (OPT), TN visa or any other non-immigrant work status).