Principal Cyber Threat Intelligence Analyst

Fifth Third Bank is a banking institution seeking a Principal Cyber Threat Intelligence Analyst for its Threat Research team. The role focuses on monitoring and analyzing threat intelligence, investigating cyber threats and incidents, producing actionable intelligence, and communicating findings to stakeholders and executive management. The analyst will also improve cyber intelligence capabilities, support security initiatives, mentor junior analysts, and help remediate control gaps.

Responsibilities:

• Monitor and analyze threat intelligence sources to stay abreast of new threats and tactics
• Collect, process, and disseminate intelligence to stakeholders in a timely and actionable manner; piece together malicious campaigns, threat actors, and unattributed activity
• Develop and maintain relationships with external organizations to improve information sharing and collaboration
• Identify gaps in both detection and collection; recommend and participate in the implementation of solutions to fill those gaps
• Produce intelligence reports and technical briefings on current and emerging threats for audiences with a various levels of technical knowledge and seniority
• Use excellent analytical skills to work in a diverse team environment, exchanging ideas and data with incident responders, threat emulation engineers, and developers
• Present complex technical topics to senior management, internal stakeholders, and peers
• Provide technical subject matter expertise in support of strategic Cyber projects and initiatives to enhance and improve Cyber Intelligence capabilities and maturity
• Develops security solutions for medium to highly complex information security issues
• Collaborates with appropriate response partners, assist with determining the root cause of incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures
• Escalate issues to management in a timely manner with appropriate information regarding severity, exposure, and action items; this role requires critical thinking and investigative mindset coupled effective written, and verbal communication skills
• Act as a mentor to more junior analysts
• Serves as an Information Security Subject Matter Expert (SME) by maintaining knowledge of industry recognized security technologies and concepts; actively engages and assists lines of business to understand their needs and develop secure business solutions
• While operating within the Bank's risk appetite, achieve results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types
• Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined
• Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience
• Performs other duties as assigned

Requirements:

• Bachelor's Degree in Computer Science, Information Systems, or other related field, or other relevant experience
• 5 to 10 years of experience with the analysis/investigation of cyber security threats and associated incidents
• A empathetic approach to collaboration and a flexible attitude, ready to work with a team passionate about disrupting adversaries and protecting the Bank and our customers
• A well-rounded understanding of the current threat landscape
• Strong knowledge of Cyber Threat Intelligence principles to include indicators of compromise (IOC) types, indicator pivoting and indicator attribution strength
• The ability to make a hypothesis based on your research, prove or disprove it using data, and then communicate that information
• Excellent interpersonal, organizational, writing, communications, and briefing skills
• Motivation to dig through internal and open-source data to find threat information and use it to protect Fifth Third interests
• Position not available for immigration sponsorship
• Experience working remotely with a geographically distributed team
• Experience with Network and Host malware detection engineering
• Skills to profile and track cyber actors efficiently, including YARA, infrastructure tracking, reverse engineering capabilities, and indicator pivoting techniques
• Direct experience tracking apex cyber actors, familiarity with their TTPs and key features that can be used for attribution
• Enough experience with a scripting language to automate various aspects of your work
• Information security community experience; a blog, website, published papers, conference presentations, or other experience on the public side of the security field