Cyber Threat Analyst

Alliant Credit Union; Chicago (IL); Hybrid; USD 70,000 - 108,000; Full time

Benefits offered by this job

Annual performance bonus

Work from home up to 3 days a week

Paid parental leave

Employee discount programs

Time off including paid personal and s

11 paid holidays

Job summary

Alliant Credit Union is seeking a Threat Intelligence Analyst to operationalize threat intelligence and support threat-informed defense activities within a hybrid, full-time role in Chicago. You will triage and analyze intelligence, enhance TIP, and produce actionable recommendations for cybersecurity, fraud, and risk management functions.

The ideal candidate has a 4-year degree in CS/Cybersecurity or related field, security certifications preferred, and experience in threat intelligence, threat

Qualifications

• Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Technology or Related
• Minimum - 0 years
• Preferred - 2 of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related

Responsibilities

• Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
• Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
• Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
• Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
• Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
• Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
• Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
• Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
• Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
• Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
• Support SOC investigations by identifying relevant indicators and adversary behaviors.
• Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats effecting vendors, service providers, and supply chain partners and assessing their potential impact.
• Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
• Protect Alliant, it's members, and it's brand by monitoring and responding to online impersonation, counterfeiting, infringement other malicious activities that may harm the organization.
• Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.

Job description

TOUHY-OPER SUPPORT CENTER
11545 W Touhy Ave
Chicago, IL 60666, USA

TOUHY-OPER SUPPORT CENTER
11545 W Touhy Ave
Chicago, IL 60666, USA

Locations

TOUHY-OPER SUPPORT CENTER
11545 W Touhy Ave
Chicago, IL 60666, USA

TOUHY-OPER SUPPORT CENTER
11545 W Touhy Ave
Chicago, IL 60666, USA

• Hybrid
• Risk/Compliance
• Full-Time
• Requisition #: CYBER002016

Description

Protect Alliant and its members by operationalizing threat intelligence and supporting threat-informed defense activities. Triage and assess incoming intelligence to identify actionable risks, support adversary emulation efforts to simulate real-world attack scenarios and uncover visibility gaps. Communicate findings and maintain documentation of threat scenarios and recommendations and support continuous improvement in detection and response capabilities.

• Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
• Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
• Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
• Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
• Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
• Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
• Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
• Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
• Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
• Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
• Support SOC investigations by identifying relevant indicators and adversary behaviors.
• Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats effecting vendors, service providers, and supply chain partners and assessing their potential impact.
• Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
• Protect Alliant, it's members, and it's brand by monitoring and responding to online impersonation, counterfeiting, infringement other malicious activities that may harm the organization.
• Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.

Education &Years of Experience

• Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Technology or Related
• Minimum - 0 years
• Preferred - 2 of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related

In Lieu of Education

• 2 years of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related

License/Certifications/Training

• Preferred - Security+, or similar entry-level cybersecurity certifications
• Preferred - Exposure to threat intelligence platforms or scripting (Python)
• Preferred - Military training or equivalent experience

Typical hiring range: $69,600.00 to $108,300.00 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge.

Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match including:

• Annual performance bonus
• Work from home up to 3 days a week
• Paid parental leave
• Employee discount programs
• Time off including paid personal and sick days
• 11 paid holidays

*Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment.

Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.

The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.

Qualifications

Skills

Behaviors

:

Motivations

:

Education

Experience

Licenses & Certifications

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.