Cyber Threat Intelligence US Lead

S&P Global•New York, NY

About The Position

The Cyber Threat Intelligence US Lead will support the SGA Cyber Defense team in protecting S&P Global’s critical assets through advanced threat intelligence and proactive security measures. The role analyzes the external cyber threat landscape and combines threat intelligence with internal incident data to identify attack patterns and inform the organization’s defensive model and security controls. The position leads proactive research into emerging threats, attack patterns, and adversary tactics targeting financial services and related industries. It develops collection strategies aligned with Priority Intelligence Requirements (PIRs), conducts analysis of threat actors and their infrastructure, tools, and techniques, and produces actionable intelligence to inform security planning, prevention, and threat hunting. The role also coordinates across organizational and global security teams and prepares intelligence assessments, briefings, and reports for senior leadership.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, International Relations, or equivalent work experience in cyber threat intelligence.
At least 3 years of experience in cyber threat intelligence, with a demonstrated focus on proactive research and analysis.
Strong analytical and research skills, including experience with open source intelligence (OSINT) collection and analysis methodologies.
Proficiency with threat intelligence frameworks such as MITRE ATT&CK, the Diamond Model, or Kill Chain analysis.
Excellent written and verbal communication skills, including the ability to present complex technical findings to diverse audiences.
Experience with threat intelligence tools and platforms for research, analysis, and reporting.

Nice To Haves

Advanced degree in a relevant field or professional certifications such as GCTI, SANS FOR578, or equivalent threat intelligence credentials.
Experience with malware analysis, reverse engineering, or digital forensics techniques.
Knowledge of geopolitical factors influencing cyber threat landscapes and state-sponsored threat actor activities.
Familiarity with financial services regulatory requirements and industry-specific threat vectors.

Responsibilities

Analyze the external cyber threat landscape to inform the organization’s defensive model.
Oversee the collection and synthesis of cyber threat intelligence and internal incident data to identify attack patterns and prioritize control enhancements.
Coordinate with other areas of the organization to guide strategic direction, improve cross-group workflow coordination, and identify intelligence opportunities.
Lead proactive threat research into emerging threats, attack patterns, and adversary tactics targeting financial services and related industries.
Develop and execute collection strategies aligned to Priority Intelligence Requirements (PIRs), focused on strategic and tactical intelligence.
Analyze threat actor groups, infrastructure, tools, and techniques to produce actionable intelligence that supports preventive security measures.
Create and maintain threat profiles, campaign tracking, and adversary attribution analysis to inform security planning and investment decisions.
Collaborate with global security teams to turn research findings into defensive recommendations and threat-hunting opportunities.
Produce intelligence assessments, briefings, and reports for senior leadership, providing strategic context on the threat environment and its business implications.