Threat Intelligence Analyst

United States

Citizens

Citizens offers personal and business banking, student loans, home equity products, credit cards, and more. You're made ready and so are we. ™

View all jobs at Citizens

Apply now Apply later

The Cyber Intelligence Analyst is a junior role focusing on strategic intelligence by conducting all source intelligence analysis leveraging internal and external threat data to proactively identify threats posed to Citizens.
In this role, you will have a background or familiarization with intelligence analysis, managing the intelligence lifecycle, an understanding of the overall financial sector threat landscape and the acumen and wherewithal to interpret technical threats and risks to technical and non-technical senior leaders.
You will focus on the delivery of strategic intelligence reporting to a range of internal stakeholders including the incident response function, attack surface management teams, insider threat and key senior leaders. In addition, you will contribute to the Threat Hunting and Fraud Intelligence programs. The objective is to drive decision making, mitigation and awareness across the organization through various means and cross pillar collaboration.
 

Responsibilities:

  • Supporting teams throughout Citizens’ Security programs and the greater organization by identifying, tracking, monitoring, and reporting on potential risks, issues, and threats to Citizens to accurately depict and mitigate the current and emerging threat landscape.
  • Executing processes and procedures to monitor and analyze open source, government, and sharing community sources/feeds to identify relevant threats and vulnerabilities to Citizens’ business operations, information systems, and products while advising senior leaders to foster informed decision making.
  • Delivering intelligence products through various mechanisms including written assessments, verbal briefings, and relevant metrics.
  • Participating in the continuous improvement of the efficacy of the organization’s Threat Intelligence Platform.
  • Responding to intelligence inquiries from law enforcement agencies as required.
     

Qualifications
Required Experience and Skills: 

  •  2 years of combined experience in threat intelligence, cyber security, SOC or Military Intelligence
  • Working knowledge of the intelligence lifecycle
  • Technical capability or knowledge, specifically network and application security
  • Experience collecting, analyzing and interpreting data from multiple sources, documenting the results and providing meaningful analytic products.
  • Strong ability to effectively communicate (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact, likelihood, containment and remediation activities, and threat actor TTPs
  • Understanding of the MITRE ATT&CK Framework
  • Knowledge of current and emerging cyber threats and vulnerabilities
  • Basic understanding of threat actor methodologies is required.
  • Strong interpersonal skills to interact with teams and multiple departments to achieve objectives.
  • Strong critical/analytical thought process, problem solving and writing skills
  • Ability and confidence to work autonomously to plan and prioritize workload in order to achieve identified objectives
     

Desired Experience and Skills:

  • Prior financial services work experience
  • Military, Department of Defense (DoD) or Law Enforcement/Government intelligence analysis experience
  • Experience with Splunk
  • Threat hunting experience.


Preferred Education and certifications:
 

  • Bachelor’s degree in related field or equivalent work experience
     

Equal Employment Opportunity

Citizens, its parent, subsidiaries, and related companies (Citizens), provides equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability, or history or record of a disability, ethnicity, gender, gender identity or expression, transgendered and transitioning individuals, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens we are committed to fostering an inclusive culture that enables colleagues to bring their best selves to work every day and where all are expected to be treated with respect and professionalism. Employment decisions are based solely on experience, performance, and ability. We perform our best so we can do more for our customers, colleagues, communities and shareholders.

Equal Employment and Opportunity Employer

Job Applicant Data Privacy Policy

Background Check

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.


Apply now Apply later

* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰

Job stats:  7  4  0

Tags: Application security DoD Incident response MITRE ATT&CK Monitoring Open Source Privacy SOC Splunk Threat intelligence TTPs Vulnerabilities

Region: North America
Country: United States

More jobs like this

Explore more career opportunities

Find even more open roles below ordered by popularity of job title or skills/products/technologies used.