Principal Cyber Threat Intelligence Analyst

Fifth Third Bank • Virtual - California, CA

1d • $96,500 - $207,500 • Remote

About The Position

As a Principal Cyber Threat Intelligence Analyst for the Threat Research team, you will be responsible for searching through various reporting and telemetry to identify, analyze, and contextualize threats to the Bank. You will leverage internal telemetry, common threat intelligence data providers, information from trust groups, and other sources to understand the threat landscape and its risks. Your findings will be communicated to various stakeholders, including colleagues, the Detection and Response Team, and executive management. This role requires technical expertise and knowledge of security practices, procedures, and capabilities to perform analytical work. You will be part of a dynamic team focused on improving the Bank's defensive posture and protecting customers.

Requirements

• Bachelor’s Degree in Computer Science, Information Systems, or other related field, or other relevant experience.
• 5 to 10 years of experience with the analysis/investigation of cyber security threats and associated incidents.
• A well-rounded understanding of the current threat landscape.
• Strong knowledge of Cyber Threat Intelligence principles to include indicators of compromise (IOC) types, indicator pivoting and indicator attribution strength.
• The ability to make a hypothesis based on your research, prove or disprove it using data, and then communicate that information.
• Excellent interpersonal, organizational, writing, communications, and briefing skills.
• Motivation to dig through internal and open-source data to find threat information and use it to protect Fifth Third interests.
• The desire to research and operationalize emerging AI technologies to advance team capabilities in order to counter AI-enabled adversary techniques and continuously improve defensive controls against evolving threats.

Nice To Haves

• Experience working remotely with a geographically distributed team.
• Experience with Network and Host malware detection engineering.
• Skills to profile and track cyber actors efficiently, including YARA, infrastructure tracking, reverse engineering capabilities, and indicator pivoting techniques.
• Direct experience tracking apex cyber actors, familiarity with their TTPs and key features that can be used for attribution.
• Enough experience with a scripting language to automate various aspects of your work.
• Information security community experience; a blog, website, published papers, conference presentations, or other experience on the public side of the security field.

Responsibilities

• Monitor and analyze threat intelligence sources to stay abreast of new threats and tactics.
• Collect, process, and disseminate intelligence to stakeholders in a timely and actionable manner; piece together malicious campaigns, threat actors, and unattributed activity.
• Develop and maintain relationships with external organizations to improve information sharing and collaboration.
• Identify gaps in both detection and collection; recommend and participate in the implementation of solutions to fill those gaps.
• Produce intelligence reports and technical briefings on current and emerging threats for audiences with various levels of technical knowledge and seniority.
• Use excellent analytical skills to work in a diverse team environment, exchanging ideas and data with incident responders, threat emulation engineers, and developers.
• Present complex technical topics to senior management, internal stakeholders, and peers.
• Provide technical subject matter expertise in support of strategic Cyber projects and initiatives to enhance and improve Cyber Intelligence capabilities and maturity.
• Develops security solutions for medium to highly complex information security issues.
• Collaborates with appropriate response partners, assist with determining the root cause of incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures.
• Escalate issues to management in a timely manner with appropriate information regarding severity, exposure, and action items; this role requires critical thinking and investigative mindset coupled effective written, and verbal communication skills.
• Act as a mentor to more junior analysts.
• Serves as an Information Security Subject Matter Expert (SME) by maintaining knowledge of industry recognized security technologies and concepts; actively engages and assists lines of business to understand their needs and develop secure business solutions.
• While operating within the Bank's risk appetite, achieve results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.
• Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined.
• Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience.
• Performs other duties as assigned.

Benefits

• Comprehensive benefits and differentiated compensation offerings
• Eligible to participate in an incentive compensation plan
• Extensive benefits programs designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal