Cyber Security Analyst III

Principal Financial Group • Des Moines, IA

8h • $110,000 - $132,000 • Hybrid

About The Position

We’re looking for an experienced Cyber Security Analyst to join our Threat Intelligence Security team. In this role, you’ll have the chance to help mature our threat intelligence service to support operational and tactical decision-making across the organization. Members of this team are highly motivated, dedicated, and passionate about cyber defense.
You'll have the opportunity to:
Perform day-to-day threat intelligence operations, including source collection/management of threat intel, analysis and production of intelligence, dissemination of intelligence, and threat hunting
Contribute to the strategy and design of the threat intelligence service
Provide intelligence support during incident response activities, and directly assist with significant incidents
Produce threat analysis reports, briefings, and actionable insights for the security operation center
Develop and maintain methodology to track adversaries targeting our organization and industry
Prepare and deliver internal threat intelligence reports, briefings about threat actors, TTPs, and external threats to internal teams and leadership on changes to the cyber threat landscape
Collect information on threats to the organization through communication with other partner institutions, mailing lists, open-source news, and industry partnerships
Leverage an intrusion framework, such as Kill Chain or Diamond, to develop a rich portfolio of threat actors’ tactics and activity that will support the ongoing improvement of cyber defenses
Operating at the intersection of financial services and technology, Principal builds financial tools that help our customers live better lives. We take pride in being a purpose-led firm, motivated by our mission to make financial security accessible to all. Our mission, integrity, and customer focus have made us a trusted leader for more than 140 years.

Requirements

• Bachelor's degree in a related field or equivalent experience
• 4+ years of cybersecurity technology experience with a preference in threat intelligence
• Experience writing scripts (e.g., Python or similar languages) and developing queries for security platforms such as SIEM and EDR
• Experience with threat intelligence platforms and tooling, reporting, intelligence enrichment and integration processes
• Knowledge of the Cyber Kill Chain, Diamond Model of Intrusion Analysis, or other intelligence frameworks
• Experience with analyzing and interpreting data from various sources, documenting the results and providing meaningful analysis reports and briefings
• Ability to communicate/interact with various audiences, including senior leaders
• Proven knowledge of common adversary tactics, techniques, and procedures (TTPs)
• Self-motivated, analytical, and resourceful

Nice To Haves

• Professional threat Intelligence experience
• Experience driving innovation, continuous improvement mindset, and maturing threat intelligence offerings
• Ability to create reports, actionable intelligence, and threat insights

Responsibilities

• Perform day-to-day threat intelligence operations, including source collection/management of threat intel, analysis and production of intelligence, dissemination of intelligence, and threat hunting
• Contribute to the strategy and design of the threat intelligence service
• Provide intelligence support during incident response activities, and directly assist with significant incidents
• Produce threat analysis reports, briefings, and actionable insights for the security operation center
• Develop and maintain methodology to track adversaries targeting our organization and industry
• Prepare and deliver internal threat intelligence reports, briefings about threat actors, TTPs, and external threats to internal teams and leadership on changes to the cyber threat landscape
• Collect information on threats to the organization through communication with other partner institutions, mailing lists, open-source news, and industry partnerships
• Leverage an intrusion framework, such as Kill Chain or Diamond, to develop a rich portfolio of threat actors’ tactics and activity that will support the ongoing improvement of cyber defenses

Benefits

• Flexible Time Off (FTO) is provided to salaried (exempt) employees and provides the opportunity to take time away from the office with pay for vacation, personal or short-term illness. Employees don’t accrue a bank of time off under FTO and there is no set number of days provided.
• Pension Eligible

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees