Senior Cyber Threat Intelligence Analyst

KeyBank•Brooklyn, OH

4d•$96,000 - $181,000•Hybrid

About The Position

Our Cyber Threat Management team is part of Key's broader Cyber Defense function within Corporate Information Security. Cyber Defense's mission is simple: We aim to Deter, Detect, Deny, and Disrupt adversaries through proactive threat-centric defense. This senior strategic role advances KeyBank's Cyber Threat Intelligence (CTI) program by converting external and internal threat information into forward looking intelligence that informs business decisions, cybersecurity strategy, control investments, and enterprise risk management. The analyst will maintain and refine intelligence requirements, assess the financial services threat landscape, and evaluate geopolitical developments and emerging technology risks that may affect KeyBank, its customers, its third-party ecosystem, and its long-term objectives. The analyst will produce strategic forecasts, control gap assessments, executive level intelligence products, and decision support for senior leaders. The role will also support briefings for the Board and regulators, translate complex threats into clear business impact, and help leaders prioritize resources based on intelligence, exposure, and risk. Success requires strong judgment, research, writing, stakeholder engagement, and the ability to deliver accurate, concise, and complete assessments.

Requirements

Bachelor’s in Computer Science, Cybersecurity, or related field—or equivalent experience
5+ years in CTI.
Demonstrated experience managing intelligence requirements and producing strategic intelligence for senior decision makers.
Strong understanding of the financial services threat environment and the business, operational, customer, third-party, and regulatory impacts of cyber threats.
Experience assessing geopolitical risk, state-sponsored activity, and emerging technology risks in a business or security context.
Ability to connect threat information to security controls, business exposure, and risk-based priorities.
Strong analytical, research, and writing skills.
Ability to work independently and escalate risks appropriately.
Ability to communicate concisely, effectively and directly with executive management.

Nice To Haves

GIAC Cyber Threat Intelligence (GCTI)
Certified Information Systems Security Professional (CISSP)
CompTIA Cybersecurity Analyst (CySA+)
CompTIA Security+

Responsibilities

Aggregate, evaluate, and synthesize threat intelligence from diverse sources such as open-source intelligence (OSINT), dark web forums, commercial feeds, and internal sources to identify relevant and actionable strategic insights for the organization.
Strategic Cyber Threat Intelligence (CTI) Report Writing & Briefing - Produce forward looking assessments, executive summaries and strategic forecasts on adversaries, campaigns, geopolitical developments, regulatory concerns, and technology driven risks.
Establish feedback measures that assess whether intelligence products are timely, relevant, actionable, and aligned to stakeholder needs.
Analyze the financial services industry threat landscape, including threats to banking operations, customers, payments, third parties, critical infrastructure, and sector confidence.
Evaluate emerging technology risks involving technologies such as artificial intelligence, cloud services, quantum computing).
Deep understanding of Threat Actor (TA) Tactics, Techniques, & Procedures (TTPs) and Indicators of Compromise (IOCs) utilized by cyber adversaries with the ability to identify new and novel TTP’s.
Provide intelligence support during significant incidents or emerging threat events by clarifying context, likely implications, and potential future developments.
Conduct threat to control gap assessments by comparing relevant adversary capabilities and attack paths with existing security controls, risk treatments, and business dependencies.
Familiarity with leveraging frameworks (MITRE ATT&CK, D3FEND, Diamond Model, Kill Chain), security platforms like Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Platform (TIP), and Endpoint Detection and Response (EDR).
Apply intelligence led prioritization to help focus defensive resources, control improvements, threat hunting, vulnerability management, exercises (tabletop, red / blue / purple), and risk decisions on the threats most relevant to KeyBank.
Partner with Cyber Defense, Security Engineering, Fraud, Third-Party Risk Management, Third-Party Security, Technology, Legal, and other teams to assess and communicate cyber risks.
Provide mentorship and technical guidance to junior analysts and cross functional partners.
Lead by example in fostering a culture of curiosity, rigor, and continuous learning within the CTI function.
Represent KeyBank within intelligence sharing communities, industry working groups, government partnerships, and peer collaboration forums.
Leverage external partnerships and intelligence exchanges to strengthen organizational awareness and preparedness.