Cyber Threat Analyst

Alliant Credit Union•Chicago, IL

1d•$69,600 - $108,300•Hybrid

About The Position

Protect Alliant and its members by operationalizing threat intelligence and supporting threat-informed defense activities. Triage and assess incoming intelligence to identify actionable risks, support adversary emulation efforts to simulate real-world attack scenarios and uncover visibility gaps. Communicate findings and maintain documentation of threat scenarios and recommendations and support continuous improvement in detection and response capabilities.

Requirements

Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Technology or Related
Minimum - 0 years
2 years of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related (In Lieu of Education)

Nice To Haves

Preferred - 2 of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related
Preferred - Security+, or similar entry-level cybersecurity certifications
Preferred - Exposure to threat intelligence platforms or scripting (Python)
Preferred - Military training or equivalent experience

Responsibilities

Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
Support SOC investigations by identifying relevant indicators and adversary behaviors.
Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats effecting vendors, service providers, and supply chain partners and assessing their potential impact.
Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
Protect Alliant, it's members, and it's brand by monitoring and responding to online impersonation, counterfeiting, infringement other malicious activities that may harm the organization.
Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.