Sr. Threat Intelligence Specialist

Newell Brands•Atlanta, GA

About The Position

The Cyber Security Senior Specialist, Threat Intelligence is a member of the Security Operations team and leads the day-to-day operation of Newell Brands' threat intelligence program. The role collects, analyzes and disseminates timely, actionable intelligence on the threats facing a global consumer goods company — how and where attacks originate (external and insider) — the tactics, techniques and procedures (TTPs) threat actors use, and the trends that signal what is coming next. The focus of this role is operational impact: turning intelligence into action. The Senior Specialist operationalizes the threat intelligence program, drives the implementation of controls that protect against emerging threats, and informs mitigation solutions that stop new attacker tactics before they impact Newell. While the role reports into Security Operations, it works cross-functionally — partnering with detection engineering, incident response, vulnerability management, IT and business stakeholders — to support and inform decisions at the strategic, operational and tactical levels.

Requirements

6+ years of experience in cyber security, preferably in a Fortune 500, global environment.
Background in intelligence, information security, incident response, exposure management, or related roles.
Proven analytic experience with cyber security technologies and security concepts.
Strong knowledge of current and developing threat actor TTPs.
Working knowledge of intrusion detection and prevention systems, attack methodologies, security operations, vulnerabilities, indicators of compromise and incident response technology.
Knowledge of computer operating systems, applications, hardware and software, and how they can be exploited.
Demonstrated ability to translate threat intelligence into actionable control and mitigation recommendations.
Ability to communicate and convey findings at the tactical, operational and strategic levels to technical and non-technical audiences, working across teams quickly, clearly and effectively.
Exceptional organizational skills, with meticulous data analysis and reporting.
Works well under pressure, with initiative, persistence and determination, and a genuine inclination to keep learning.

Nice To Haves

Experience operationalizing, building or maturing a threat intelligence program.
Hands-on experience with a threat intelligence platform (TIP), MITRE ATT&CK mapping and structured CTI frameworks (Diamond Model, Cyber Kill Chain).
Experience partnering with detection engineering, incident response and vulnerability management to implement controls and detections.
Familiarity with the cloud threat landscape (Azure, M365) and identity-based attack techniques.
Experience in a global consumer goods or manufacturing environment.
One or more relevant certifications, such as GIAC Cyber Threat Intelligence (GCTI), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA) or Certified Information Systems Security Professional (CISSP).

Responsibilities

Operate and mature the threat intelligence program and lifecycle, establishing repeatable processes for collection, analysis, production and dissemination.
Monitor internal and external sources to identify new and emerging threats, providing proactive detection and analysis of their potential impact to Newell.
Perform in-depth analysis of threat actor TTPs to identify indicators of compromise (IOCs) and map activity to frameworks such as MITRE ATT&CK.
Develop and maintain a threat intelligence repository to track, analyze and report on threats and recommended actions.
Develop and maintain an understanding of Newell Brands' current and forward-looking threat profile and use it to prioritize intelligence efforts.
Translate intelligence into action — driving the implementation of controls that protect against emerging threats and reduce Newell's exposure.
Inform and recommend mitigation solutions that counter new and evolving attacker tactics before they can affect the business.
Partner with detection engineering, incident response and vulnerability management to turn intelligence into detections, response actions and closed gaps.
Collaborate on identifying exploitable weaknesses in Newell's networks and prioritizing remediation based on real-world threat activity.
Support the insider threat program by correlating behavioral, access and data-movement signals (DLP, UEBA, identity) with intelligence to identify potential insider risk indicators.
Work closely with other security and IT teams to ensure timely, relevant dissemination of threat intelligence that supports and informs their work.
Provide expert analysis and guidance on threat intelligence to senior management and other stakeholders, communicating clearly at the tactical, operational and strategic levels.
Collaborate with internal and external stakeholders to develop intelligence products tailored to their needs.
Participate in incident response activities as required, providing intelligence context and support.
Support cyber security initiatives and the secure delivery and ongoing operations of Newell Brands, protecting the confidentiality and integrity of data.
Keep abreast of new security technologies and industry trends and continue to grow and evolve technical competencies.