Senior Threat Intelligence Analyst

Webster Bank•Southington, CT

75d•$115,000 - $130,000•Hybrid

About The Position

If you’re looking for a meaningful career, you’ll find it here at Webster. Founded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer. Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work! The Senior Threat Intelligence Analyst is a key member of Webster Bank’s Cybersecurity team, responsible for leading efforts to collect, analyze, and operationalize cyber threat intelligence that impacts the bank and its stakeholders. This role drives program maturity by producing actionable intelligence, mentoring junior analysts, and collaborating with detection engineering, SOC, and incident response teams to strengthen the bank’s defensive posture. The Senior Analyst ensures Webster Bank maintains a proactive, intelligence-driven defense against evolving cyber threats.

Requirements

Bachelor’s degree required (Cybersecurity, Intelligence Studies, or related field preferred).
5+ years of experience in threat intelligence, cybersecurity, or SOC-related roles.
Familiarity with common threat actor TTPs, malware families, and financial sector threats.
Proven ability to translate raw threat data into actionable insights and communicate risk clearly.
Strong writing skills for concise intelligence reports, summaries, and executive briefings.
Technical proficiency demonstrated through independent research, projects, or scripting (Python preferred).
Experience with SIEMs, EDR, TIPs, and detection engineering workflows.
Understanding of threat intelligence frameworks (e.g., MITRE ATT&CK, Diamond Model, etc.) and attacker methodologies.
Demonstrated experience in threat hunting, incident response workflows, and vulnerability intelligence analysis.

Nice To Haves

Preferred certifications: GCTI, CISSP, or equivalent.

Responsibilities

Lead the triage and enrichment of threat intelligence from TIPs, OSINT, dark web monitoring, and industry reporting.
Correlate external intelligence with internal telemetry, alerts, and incidents to identify emerging threats.
Track threat actors, campaigns, and TTPs relevant to the financial services sector.
Develop tactical, operational, and strategic intelligence products for technical and executive audiences.
Produce clear, actionable intelligence reports, weekly summaries, and threat briefings.
Own and lead intelligence-driven threat hunting procedures, including hypothesis development, execution, and reporting.
Enrich alerts, vulnerability findings, and IR workflows with contextual intelligence.
Map indicators and behaviors to MITRE ATT&CK and other frameworks to support detection engineering.
Participate in threat-sharing communities (e.g., FS-ISAC) and contribute to collective defense efforts.
Provide feedback to SOC and detection engineering teams to improve alerting and detection logic.
Mentor junior analysts and contribute to team knowledge development.
Define and track KPIs and metrics to measure threat intelligence program effectiveness.
Support automation initiatives for enrichment and alert triage using scripting or SOAR platforms.
Maintain awareness of cloud threat models and third-party risk intelligence.