Job Description

Who are we looking for:

A CTI Leader who will be responsible for collection management, tool use case development, and platform architecture and engineering. This leader’s work will directly support a team of global intelligence professionals charged with analyzing and responding to threats confronting State Street and the financial sector. CTI staff analyzes cyber threats targeting the financial sector and applies this analysis to SOC operations, threat hunting, incident response, vulnerability management, insider threat, and business requirements while ensuring that senior leaders are advised of current and ongoing threats allowing them to make informed decisions. 

What will you be responsible for:

Achieving an expect level understanding of how CTI tools can be used to support a variety of uses cases.
Serving as a collection manager with the ability to support existing and emerging intelligence collection and analysis requirements.
Managing technical aspects of relationships with vendors, serving as the CTI tool subject matter expert within State Street.
Working seamlessly with security, engineering and architecture experts across State Street, ensuring CTI platforms remain mission capable.
Evaluating new technologies to meet existing and emerging CTI requirements.
Working side by side with internal network defenders to provide intel-driven insights into existing and emerging threats.
Processing and analyzing large data sets to identify trending of threat activity across the network.
Influencing enhancements to preventative and detective controls.

What we value:

Incredible attention to detail.
Impeccable communication and presentation skills, both orally and written.
Ability to work well with others and under pressure.
In-depth understanding of collection management concepts, threat intelligence platforms, malware sandboxes, SIEMs, link analysis tools, open-source and proprietary threat intelligence data feeds.
Knowledge of current cyber threats and vulnerabilities.
Genuine passion for identifying and building best of breed technology solutions to support CTI operations.
Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
Knowledge of threat hunting techniques, tools and operational procedures.
Familiarization of the MITRE ATT&CK Framework.
Knowledge of IT architecture and operations (computing, network, storage & cloud)
Experience with responding to audit and regulatory requirements.
Ability to work in an environment with a geographically dispersed team.

Education & Preferred Qualifications

5+ years working in intelligence supporting large organization required, cyber intelligence preferred
BS in a Cyber Security related field such as Information Systems, Information Technology, or Computer Science preferred
Security certifications a plus: CISSP, IFPC, CISM, IAC
Software development and/or scripting experience a plus: Python, Powershell, etc.
Financial services experience preferred
Experience with integrated threat intelligence feeds and other data sources with threat intelligence platforms, link analysis tools and SIEM technologies.