Cyber Threat Intelligence Senior Analyst

Job Description :

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection.

Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities and shareholders every day.

One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. Were devoted to being a diverse and inclusive workplace for everyone.

We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.

The Cyber Threat Intelligence team works with partners, both internal and external, in order to reduce risk to the Bank and to the financial sector at large.

The team provides timely situational awareness, conducts deep analysis of threats and translates indicators of threat into actionable information to reduce impact to the bank.

Stakeholders include cyber-security response teams, internal lines of business, senior leadership and external organizations such as law enforcement, industry peers and intelligence sharing partners.

The Cyber Threat Intelligence Senior Analyst is responsible for conducting in-depth research, documentation, and intelligence analysis of key cyber threats to develop a comprehensive picture of the cyber threat landscape.

This includes research via the use of various sources; development of historical, trend, and link analysis; and written and oral reporting to provide actionable intelligence.

The analyst will also work to proactively research new threats and establish trends and patterns among existing attacks to help predict future risks.

Responsibilities include, but are not limited to :

Working in a tactical / strategic role cultivating intelligence sources, analyzing information, creating intelligence, and hunting for exposures or related incidents

Researching current and emerging threats, malware analysis, campaign assessment, data collection and analysis

Researching threat actors and cultivating and assessing new sources of threat information and intelligence

Collecting, assessing, and cataloguing threat indicators and responsibility for adding context to threat indicators to convey urgency, severity, and credibility

Risk management

Maintaining knowledge of threat landscape by monitoring OSINT and related sources

Tracking cyber threat actors and their infrastructure with a view to disrupting their activity

Collaborating with appropriate business partners and lines of business to analyze threats

Escalating issues to management in a timely manner with appropriate information regarding risk and impact

Exercising independent judgment in methods, techniques and evaluation criteria for obtaining results

Participating in technical bridge lines to facilitate the identification, mitigation and containment of cyber-security incidents

Drafting well-written analytical assessments and providing briefings to response teams, enterprise counterparts, and senior leadership on key issues

Mentoring and developing other analysts on the team

Required Skills :

Minimum of 10 years of InfoSec experience tracking and reporting on cyber threats

Experience as an intelligence analyst, and / or malware analyst is necessary

Technical or information security certifications are also strong plus

Excellent organizational and analytical skills

Ability to communicate (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact, likelihood, containment and remediation activities, and threat actor techniques, tactics and procedures

Excellent written and verbal communication skills

Ability to juggle multiple work efforts in a fast-paced environment and to be able to quickly change direction as needed

Strong influencing skills

Ability to prioritize conflicting tasks

Proven experience with Information Security related activities

Experience in an operations focused information security role

Experience conducting analysis / investigation and containment of potential data breaches or cyber security incidents

Familiarity with security vulnerabilities, exploits, malware and digital forensics

Familiarity with network security vulnerabilities, exploits and attacks

Familiarity with most operating systems, particularly UNIX and Windows

Ability to work in a strong team-oriented environment with a sense of urgency and resilience whilst able to work independently

Ability to work effectively with technical and non-technical business owners

The candidate should exhibit a firm understanding of the cyber threat landscape.

The candidate should be knowledgeable of emerging technologies and trends and should be able to identify strategic trends that may impact the bank based on data from a wide variety of sources.

This person must have an inquisitive mindset and be able to translate raw data into actionable intelligence.

Desired Skills

Bachelors or higher degree desired.

Advanced degree in International Affairs or similar field a strong plus.

Technical or information security certifications are also a strong plus.

Foreign language fluency (Russian / Arabic / Farsi / Chinese / Korean) desired.

Experience reporting on the cybercriminal threat

This job will be open and accepting applications for a minimum of seven days from the date it was posted.

Shift :

1st shift (United States of America)

Hours Per Week :

Pay Transparency details

US - CO - Denver - 1144 15th St (CO9926), US - DC - Washington - 1800 K St NW - 1800 K Street NW (DC1842)Pay and benefits informationPay range$142,800.

00 - $193,300.00 annualized salary, offers to be determined based on experience, education and skill set.Discretionary incentive eligibleThis role is eligible to participate in the annual discretionary plan.

Employees are eligible for an annual discretionary award based on their overall individual performance results and behaviors, the performance and contributions of their line of business and / or group;

and the overall success of the Company.BenefitsThis role is currently benefits eligible. We provide industry-leading benefits, access to paid time off, resources and support to our employees so they can make a genuine impact and contribute to the sustainable growth of our business and the communities we serve.