Sr Mgr Cyber Threat Operations - 90397460 - Washington

Amtrak•Washington, DC

12d•$149,400 - $193,644•Onsite

About The Position

The Senior Manager, Cyber Threat Intelligence leads Amtrak's enterprise threat intelligence program, delivering strategic, operational, and tactical intelligence capabilities that enable proactive defense and informed risk-based decision-making across corporate and operational technology environments. defining the CTI vision, operating model, governance framework, and multi-year strategic roadmap while leading a team of intelligence professionals focused on identifying, analyzing, and operationalizing cyber threat intelligence.

Requirements

Bachelor’s Degree or equivalent combination of education, training and/or relevant experience.
Plus 9 years of progressive experience in area(s) of specialization (cyber threat intelligence, all-source intelligence, counterintelligence, national security, threat modeling, defensive cyber operations, adversary emulation, cyber deception).
Strong analytical and critical thinking skills with the ability to assess complex cyber threats and risks.
Deep understanding of adversary tradecraft, motivations, emerging threat trends, and their potential business impact.
Experience leveraging Threat Intelligence Platforms (TIPs), SIEM, SOAR, and all-source intelligence tools.
Knowledge of technical, network, human, and physical vulnerability identification and classification.
Ability to operate effectively across strategic, operational, and tactical intelligence environments.
Expertise in attack vectors, adversary tactics, techniques, and procedures (TTPs), and penetration testing principles.
Skilled at developing and delivering executive-level presentations and threat briefings.
Strong written and verbal communication skills, with the ability to translate complex topics into actionable insights.
Proven ability to collaborate with internal and external stakeholders while building and developing high-performing teams.
Experience defining meaningful Cyber Threat Intelligence KPIs and proactively monitoring emerging threats to drive continuous program improvement.

Nice To Haves

Master's degree in Cybersecurity, Computer Science, Intelligence Studies, Information technology, or equivalent.
Plus 11 years of relevant work experience.
Professional Cybersecurity-related certifications (e.g. GIAC Cyber Threat Intelligence GCTI, GIAC Reverse Engineering Malware GREM, ISC2 Certified Information Systems Security Professional CISSP)
Preferred knowledge and familiarity with active or emerging cyber threats targeting Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA).

Responsibilities

Lead the development, implementation, and continuous improvement of the Cyber Threat program by defining strategy, operating models, intelligence standards, roadmaps, and performance metrics that align with cybersecurity objectives and organizational risk priorities.
Perform threat intelligence correlation, threat hunting, and analysis of emerging attack vectors to strengthen enterprise detection and response capabilities.
Drive innovation by managing intelligence technologies, platforms, commercial and open source feeds, and external intelligence-sharing partnerships to enhance operational effectiveness, refine cybersecurity tools and architecture, and automation capabilities.
Lead cyber defense validation activities, including incident response exercises, simulations, purple-team engagements, and adversary emulation to assess preparedness and control effectiveness.
Establish intelligence-driven processes and capabilities to produce actionable strategic assessments, operational intelligence reporting, tactical intelligence products, and executive-level cyber risk insights.
Integrate threat intelligence into key cybersecurity functions, including Cyber Fusion Center operations, threat hunting, detection engineering, incident response, vulnerability management, insider threat detection, identity and access management, fraud prevention, and cyber risk decision-making.