Lead Threat Intelligence

National Payments Corporation of India (NPCI); Hyderabad; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

National Payments Corporation of India (NPCI) Hyderabad is seeking a Lead Threat Intelligence to drive the cyber threat intelligence program. You will monitor global BFSI threats, produce strategic and tactical reports, and collaborate with SOC for operational impact.

The role requires deep experience in threat intelligence, incident support, and risk-based prioritization to safeguard banking and payment platforms. Telangana-based position with full-time engagement.

Responsibilities

• Lead the development, execution, and continuous improvement of the Cyber Threat Intelligence program.
• Monitor, analyze, and assess global cyber threats impacting the BFSI industry.
• Produce strategic, operational, and tactical intelligence reports for technical and executive stakeholders.
• Track emerging threat actors, cyber crime groups, nation-state actors, and financially motivated attackers.
• Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary Tactics, Techniques, and Procedures (TTPs).
• Leverage MITRE ATT&CK framework to map adversary behavior and identify detection gaps.
• Analyze attack patterns targeting banking applications, digital payment platforms, online banking services, and financial transaction systems.
• Support incident investigations by providing threat context, attribution analysis, and intelligence-driven insights.
• Develop intelligence-led hunting hypotheses and prioritize threat-hunting activities based on business risk.
• Collect intelligence from commercial, open-source, dark web, industry, and government intelligence feeds.
• Evaluate source credibility and intelligence reliability using structured analytical techniques.
• Track ransomware groups, phishing campaigns, financial malware, fraud operations, and supply chain threats relevant to BFSI organizations.
• Monitor geopolitical developments and assess potential cyber impacts on financial services operations.
• Collaborate with SOC and Detection Engineering teams to operationalize threat intelligence.
• Develop and enhance detection use cases, SIEM analytics rules, watchlists, and threat indicators.
• Create and maintain KQL queries, Sigma rules, and YARA signatures.
• Improve detection coverage by aligning monitoring capabilities with emerging threat intelligence.
• Present intelligence findings and cyber risk assessments to senior leadership and executive stakeholders.
• Lead threat intelligence briefings and awareness sessions for technical and non-technical audiences.

Job description

Job Title

Lead Threat Intelligence

Location

Telangana

Job Type

Full Time

Responsibilities

• Lead the development, execution, and continuous improvement of the Cyber Threat Intelligence program.
• Monitor, analyze, and assess global cyber threats impacting the BFSI industry.
• Produce strategic, operational, and tactical intelligence reports for technical and executive stakeholders.
• Track emerging threat actors, cyber crime groups, nation-state actors, and financially motivated attackers.
• Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary Tactics, Techniques, and Procedures (TTPs).
• Leverage MITRE ATTCK framework to map adversary behavior and identify detection gaps.
• Analyze attack patterns targeting banking applications, digital payment platforms, online banking services, and financial transaction systems.
• Support incident investigations by providing threat context, attribution analysis, and intelligence-driven insights.
• Develop intelligence-led hunting hypotheses and prioritize threat-hunting activities based on business risk.
• Collect intelligence from commercial, open-source, dark web, industry, and government intelligence feeds.
• Evaluate source credibility and intelligence reliability using structured analytical techniques.
• Track ransomware groups, phishing campaigns, financial malware, fraud operations, and supply chain threats relevant to BFSI organizations.
• Monitor geopolitical developments and assess potential cyber impacts on financial services operations.
• Collaborate with SOC and Detection Engineering teams to operationalize threat intelligence.
• Develop and enhance detection use cases, SIEM analytics rules, watchlists, and threat indicators.
• Create and maintain KQL queries, Sigma rules, and YARA signatures.
• Improve detection coverage by aligning monitoring capabilities with emerging threat intelligence.
• Present intelligence findings and cyber risk assessments to senior leadership and executive stakeholders.
• Lead threat intelligence briefings and awareness sessions for technical and non-technical audiences.

Disclaimer

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.