[Hiring] Principal Cyber Threat Intelligence Analyst @Fifth Third Bank

Role Description

As a Principal Cyber Threat Intelligence Analyst for our Threat Research team, you will spend time searching through various reporting and telemetry, looking for threats, analyzing them, and making that information meaningful to our stakeholders. You'll communicate your findings to various stakeholders including colleagues, our Detection and Response Team, as well as the Bank's executive management.

Your day-to-day responsibilities include:

• Monitor and analyze threat intelligence sources to stay abreast of new threats and tactics.
• Collect, process, and disseminate intelligence to stakeholders in a timely and actionable manner; piece together malicious campaigns, threat actors, and unattributed activity.
• Develop and maintain relationships with external organizations to improve information sharing and collaboration.
• Identify gaps in both detection and collection; recommend and participate in the implementation of solutions to fill those gaps.
• Produce intelligence reports and technical briefings on current and emerging threats for audiences with various levels of technical knowledge and seniority.
• Use excellent analytical skills to work in a diverse team environment, exchanging ideas and data with incident responders, threat emulation engineers, and developers.
• Present complex technical topics to senior management, internal stakeholders, and peers.
• Provide technical subject matter expertise in support of strategic Cyber projects and initiatives to enhance and improve Cyber Intelligence capabilities and maturity.
• Develop security solutions for medium to highly complex information security issues.
• Collaborate with appropriate response partners, assist with determining the root cause of incidents and work with stakeholders and responsible parties to remediate any identified control gaps or failures.
• Escalate issues to management in a timely manner with appropriate information regarding severity, exposure, and action items; this role requires critical thinking and investigative mindset coupled with effective written and verbal communication skills.
• Act as a mentor to more junior analysts.
• Serve as an Information Security Subject Matter Expert (SME) by maintaining knowledge of industry recognized security technologies and concepts; actively engage and assist lines of business to understand their needs and develop secure business solutions.
• While operating within the Bank's risk appetite, achieve results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.
• Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined.
• Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience.
• Perform other duties as assigned.

Qualifications

• Bachelor’s Degree in Computer Science, Information Systems, or other related field, or other relevant experience.
• 5 to 10 years of experience with the analysis/investigation of cyber security threats and associated incidents.
• An empathetic approach to collaboration and a flexible attitude, ready to work with a team passionate about disrupting adversaries and protecting the Bank and our customers.
• A well-rounded understanding of the current threat landscape.
• Strong knowledge of Cyber Threat Intelligence principles to include indicators of compromise (IOC) types, indicator pivoting, and indicator attribution strength.
• Research and operationalize emerging AI technologies to advance team capabilities in order to counter AI-enabled adversary techniques and continuously improve defensive controls against evolving threats.
• The ability to make a hypothesis based on your research, prove or disprove it using data, and then communicate that information.
• Excellent interpersonal, organizational, writing, communications, and briefing skills.
• Motivation to dig through internal and open-source data to find threat information and use it to protect Fifth Third interests.
• The desire to research and operationalize emerging AI technologies to advance team capabilities in order to counter AI-enabled adversary techniques and continuously improve defensive controls against evolving threats.

Requirements

• Experience working remotely with a geographically distributed team.
• Experience with Network and Host malware detection engineering.
• Skills to profile and track cyber actors efficiently, including YARA, infrastructure tracking, reverse engineering capabilities, and indicator pivoting techniques.
• Direct experience tracking apex cyber actors, familiarity with their TTPs and key features that can be used for attribution.
• Enough experience with a scripting language to automate various aspects of your work.
• Information security community experience; a blog, website, published papers, conference presentations, or other experience on the public side of the security field.

Benefits

At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities, and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day.

The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education, and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.

Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional, and social well-being.

Company Description

Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.