Cyber Threat Intelligence Engineer IV

Edward Jones

2d•Hybrid

About The Position

Edward Jones is seeking a Cyber Threat Intelligence (CTI) professional to work across its Security Operations Center (SOC), Detection Engineering, Red Team, and Exposure Management functions. The role translates raw threat data into actionable decisions about detection coverage, adversary emulation, and the prioritization of exposures. The posting describes the team as seeking a CTI Analyst, while the position title is Cyber Threat Intelligence Engineer IV. The position tracks threat actors, campaigns, and tactics, techniques, and procedures (TTPs) relevant to the organization’s industry, geography, and technology stack. It produces tactical and strategic intelligence for technical and executive audiences, enriches SOC alerts and investigations, supports incident response, and helps connect red-team findings with detection and intelligence perspectives. Candidates living within commuting distance of the Tempe, Arizona, or St. Louis, Missouri, home offices are expected to work onsite four days per week starting June 1, 2026. Before that date, the expectation is three office days per week, preferably Tuesday through Thursday. The posting provides no salary range, but describes compensation and benefits including medical and prescription drug coverage, dental and vision insurance, disability and life coverage, retirement and tax-advantaged accounts, paid holidays, vacation, sick time, personal days, volunteer time, and possible bonuses and profit sharing.

Requirements

At least 5 years of experience in cyber threat intelligence, SOC, incident response, or a closely related security discipline.
Solid working knowledge of the MITRE ATT&CK framework and experience mapping adversary behavior to it.
Familiarity with threat intelligence platforms and OSINT collection and analysis techniques.
Experience using SIEM/EDR tooling to investigate and validate intelligence.
Understanding of vulnerability management and exposure management concepts.
Strong written and verbal communication skills, including the ability to tailor technical intelligence for analysts and executives.
Analytical mindset and sound tradecraft, including structured analytic techniques, confidence levels, and source reliability assessment.

Nice To Haves

Familiarity with scripting or data analysis, such as Python or SQL, for intelligence automation or enrichment.
Experience with STIX/TAXII or other structured threat data-sharing standards.
Prior experience in a fusion center or cross-functional security model bridging detection, red teaming, and exposure or vulnerability management.

Responsibilities

Track relevant threat actors, campaigns, and TTPs, and turn findings into intelligence products such as briefs, actor profiles, and trend reports.
Partner with the SOC to enrich alerts and investigations with threat context and help analysts triage incidents.
Work with Detection Engineering to identify gaps in coverage against adversary behavior, including behavior mapped to MITRE ATT&CK, and help prioritize detections.
Collaborate with the Red Team on threat-informed emulation plans based on likely adversaries.
Provide intelligence to Exposure Management to help prioritize vulnerabilities, misconfigurations, and attack surface findings according to exploitation trends and threat actor intent.
Monitor OSINT, dark web sources, ISACs, and commercial threat feeds, and assess the relevance and reliability of intelligence.
Maintain adversary tracking materials, including TTP matrices, campaign timelines, and indicator repositories.
Deliver tactical IOC- and TTP-level intelligence and strategic executive-level trend and risk outputs tailored to stakeholders.
Participate in incident response as a threat intelligence liaison, providing attribution context and likely adversary next steps.
Contribute to purple-team exercises by connecting red-team findings with detection and intelligence perspectives.

Benefits

Medical and prescription drug coverage
Dental coverage
Vision coverage
Voluntary benefits, including accident, hospital indemnity, and critical illness coverage
Short- and long-term disability coverage
Basic life and basic AD&D coverage
401(k) retirement plan
Health savings account
Flexible spending account
Ten paid holidays
15 days of vacation for new associates beginning on January 1 of each year
Sick time
Personal days
Paid day for volunteerism
Potential bonuses and profit sharing
Employee Assistance Program