Cyber Threat Analyst
About the role
Protect Alliant and its members by operationalizing threat intelligence and supporting threat-informed defense activities. Triage and assess incoming intelligence to identify actionable risks, support adversary emulation efforts to simulate real-world attack scenarios and uncover visibility gaps. Communicate findings and maintain documentation of threat scenarios and recommendations and support continuous improvement in detection and response capabilities.
Responsibilities
- Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
- Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
- Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
- Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
- Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
- Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
- Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
- Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
- Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
- Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
- Support SOC investigations by identifying relevant indicators and adversary behaviors.
- Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats affecting vendors, service providers, and supply chain partners and assessing their potential impact.
- Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
- Protect Alliant, its members, and its brand by monitoring and responding to online impersonation, counterfeiting, infringement, and other malicious activities that may harm the organization.
- Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.
- Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act.
- Ensure compliance with all applicable state and federal laws, company procedures, and policies.
- Maintain integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.
Requirements
- Minimum - 4 Year Bachelor's Degree in Computer Science, Cybersecurity, Information Technology or related field.
- Minimum - 0 years of experience.
- Preferred - 2 years of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering, or related experience.
- In Lieu of Education: 2 years of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering, or related experience.
Skills
- Preferred - Security+, or similar entry-level cybersecurity certifications.
- Preferred - Exposure to threat intelligence platforms or scripting (Python).
- Preferred - Military training or equivalent experience.
Pay
Typical hiring range: $69,600.00 to $108,300.00 annually. Actual compensation will be determined using factors such as experience, skills, and knowledge.
Benefits
- Health care, vision, and dental coverage.
- 401k with employer match.
- Annual performance bonus.
- Work from home up to 3 days a week.
- Paid parental leave.
- Employee discount programs.
- Time off including paid personal and sick days.
- 11 paid holidays.
- Education reimbursement.
Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours and job status such as regular full-time, regular part-time, or temporary employment.