Senior Cyber Threat Intelligence Analyst

Equitable•Syracuse, NY

60d

About The Position

At Equitable, our power is in our people. We're individuals from different cultures and backgrounds. Those differences make us stronger as a team and a force for good in our communities. Here, you'll work with dynamic individuals, build your skills, and unleash new ways of working and thinking. Are you ready to join an organization that will help unlock your potential? We are seeking a self-starting and practiced intelligence professional to join our cyber threat intelligence team. We bring together experts across multiple disciplines to deliver cross-functional, cybersecurity services to support the protection of mission-critical applications and systems that support our business operations. This role is responsible for providing expertise and guidance to management and peers on the development and implementation of improvements to core cyber intelligence competencies: collection operations, tactical support to incident response and detection, impact analysis, and strategic analysis. This role is also responsible for delivering threat-based analysis of risks to stakeholders and operates in coordination with peers from across the Cyber Fusion Center and the office of the Chief Information Security Officer. The base salary range for this position is $, - $,. Actual base salaries vary based on skills, experience, and geographical location. In addition to base pay, Equitable provides compensation to reward performance with base salary increases, spot bonuses, and short-term incentive compensation opportunities. Eligibility for these programs depends on level and functional area of responsibility. For eligible employees, Equitable provides a full range of benefits. This includes medical, dental, vision, a (k) plan, and paid time off. For detailed descriptions of these benefits, please reference the link below. Equitable Pay and Benefits: Equitable Total Rewards Program

Requirements

+ years of combined experience in cyber threat intelligence (CTI), cybersecurity architecture, security engineering, threat hunting, or incident response
+ years of experience in supporting cyber threat intelligence
Experience communicating intelligence and analysis of cyber threats in various forms (written production; briefings) for a senior-level audience
GCTI, or equivalent experience with: o Common frameworks used for threat intelligence (e.g. Kill Chain, Diamond Model, MITRE ATT&CK) o Adversarial TTPs within the context of the Cyber Kill Chain, Diamond Model Intrusion Analysis, MITRE ATT&CK methodologies, or equivalent o Ability to develop specific expertise, discern patterns of complex threat actor behavior, and communicate an understanding of current and developing cyber threats o Expert understanding of cyber threat intelligence concepts and processes o Expert ability to analyze cyber threat activity and develop relevant recommendations
Experience maintaining and developing primary intelligence requirements (PIRs) with strategic stakeholders
Experience managing threat intelligence platforms (TIP) and its integrations with cybersecurity tools
Experience with enterprise logging/SIEM solutions, intelligence and analysis tools, threat intelligence platforms, security orchestration tools, and OSINT aggregators
Knowledge of MITRE ATT&CK framework.
Confidentiality: Knowledge of practices and policies governing disclosure of information about the organization, its business activities, and employees; ability to apply this knowledge appropriately to diverse situations.
Industry Knowledge: Knowledge of the organization's industry group, trends, directions, major issues, regulatory considerations, and trendsetters; ability to apply industry knowledge appropriately to diverse situations.
Information Security Management: Knowledge of the processes, tools and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling and preventing violations of IT security.
IT Governance: Knowledge of the accountability framework and processes used to encourage proper behavior in IT activities and operations; ability to implement IT systems and controls to meet business needs and requirements.