Senior Security & Risk Analyst (Hybrid)

American Family Insurance•Boston, MA

1d•$111,000 - $189,000•Hybrid

About The Position

Join our cybersecurity team at American Family Insurance. We're seeking a Cyber Threat Intelligence leader to advance the maturity and impact of our threat intelligence program. More than monitoring threat feeds, you will transform complex threats into actionable intelligence for security operations, vulnerability management, and technology leaders, directly strengthening our cyber defense capabilities. You will report to the Senior Manager, Cybersecurity. #LI-hybrid

Requirements

Demonstrated experience delivering customer-focused solutions, support, and service.
Advanced knowledge of security analysis methodologies and reporting standards for technical and business stakeholders.
Extensive knowledge of IT Risk Management and/or Information Systems Auditing.
Extensive knowledge of IT risk and control frameworks.
Demonstrated experience conducting IT risk and control assessments.
Strong understanding of IT risk management practices, reporting, and governance.
Solid knowledge of risk management methodologies, standards, processes, governance models, and industry-recognized risk analysis frameworks.

Nice To Haves

Professional experience in cyber threat intelligence, security operations, or related cybersecurity roles.
Hands-on experience with threat intelligence platforms (TIPs) and integrating threat data into SOC, IR, or vulnerability management workflows.
Experience producing concise, and applicable intelligence reports, alerts, and briefings for all audiences.
Collaboration with cross-functional teams, contributing to shared intelligence processes and operational improvements.
Relevant industry certifications (e.g., GIAC Cyber Threat Intelligence [GCTI], Certified Information Systems Security Professional [CISSP], GIAC Security Essentials [GSEC], Certified Ethical Hacker [CEH], Certified Information Security Manager [CISM] or equivalent).
Experience using AI (Claude, CoPilot, OpenAI).

Responsibilities

Gather, analyze, and translate threat intelligence into actionable insights tailored to security teams and leadership.
Monitor emerging threats, adversary activity, IOCs, and TTPs across internal, open-source, commercial, and industry intelligence sources.
Partner with Security Operations, Vulnerability Management, and other stakeholders to strengthen cyber defense capabilities.
Produce and deliver intelligence reports, threat briefings, and alerts for technical and executive audiences.
Support incident response, threat hunting, and vulnerability management through intelligence and analysis.
Enhance threat models, detection capabilities, and adversary tracking frameworks using industry methodologies such as MITRE ATT&CK.
Continuously improve intelligence processes, tools, and knowledge management practices.
Communicate security risks and recommendations effectively to technical and non-technical stakeholders.