Cyber Threat Intelligence, SIEM, EDR

FIS Management Services; Jacksonville (FL); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Private medical cover

Dental cover

Travel insurance

Job summary

FIS in Jacksonville, FL is seeking a senior Cyber Threat Intelligence professional to translate the evolving threat landscape into actionable intelligence that informs risk identification and defensive decisions. You will lead the CTI program, drive intelligence requirements, collection, analysis, and tools, and collaborate with SOC, Incident Response, Vulnerability Management, and other teams.

A minimum of 7+ years in cybersecurity with 4+ years in CTI, plus strong communication and a

Qualifications

• 7+ years of cybersecurity experience, including 4+ years in Cyber Threat Intelligence.
• Experience leading or maturing a Cyber Threat Intelligence program or function.
• Excellent verbal and written communication skills to technical and executive audiences.
• Strong understanding of cyber threat actors, malware, attack techniques, and vulnerabilities.
• Experience using threat intelligence platforms to investigate threats and support operations.

Responsibilities

• Provide technical and operational leadership for the CTI function, mentoring analysts and ensuring high-quality analysis.
• Drive maturation of the CTI program, including requirements, collection, tooling, workflows, and reporting.
• Lead research on threat actors, campaigns, threats, vulnerabilities, and TTPs using MITRE ATT&CK.
• Manage intelligence collection from commercial/open-source sources and internal telemetry.
• Produce and review actionable intelligence for technical and executive audiences.
• Partner with SOC, Incident Response, Vulnerability Management, and other teams to translate intelligence into defense actions.

Skills

Cybersecurity

Cyber Threat Intelligence

Communication skills

Threat actors & TTPs

SIEM/EDR experience

Education

Bachelor's degree in Computer Science, Cybersecurity, Intelligence Studies, or related field

Tools

SIEM

EDR

Job description

Job Description

About FIS

Are you curious, motivated, and forward-thinking? At FIS you'll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.

Current and future (OPT) sponsorship are not available for this position

Jacksonville, FL Hybrid (three days in-office, two days virtual)

About the team

The Cyber Threat Intelligence (CTI) team identifies, analyzes, and communicates cyber threats that could impact FIS, our clients, and the financial services industry.

The team monitors the global threat landscape, including threat actors, campaigns, emerging vulnerabilities, attack techniques, and industry-specific threats, and translates that information into actionable intelligence.

CTI partners across security teams, including Security Operations, Incident Response, Vulnerability Management, and Attack Surface Management, to help drive threat hunting, detection, vulnerability prioritization, and proactive defensive measures.

The team uses intelligence requirements, internal security telemetry, commercial and open-source intelligence, and industry information sharing to provide timely, relevant intelligence to both technical teams and security leadership.

What you will be doing

You will serve as a key subject matter expert and partner across the organization, helping translate the evolving threat landscape into intelligence that supports proactive risk identification, detection, vulnerability prioritization, and defensive decision-making. This includes:

• Provide technical and operational leadership for the CTI function, setting priorities, mentoring analysts, reviewing intelligence products, and promoting consistent, high-quality analysis across the team.
• Drive the continued maturity of the CTI program, including intelligence requirements, collection, analysis, tooling, workflows, reporting, dissemination, and integration with other security functions.
• Lead research and analysis of threat actors, campaigns, emerging threats, vulnerabilities, and TTPs relevant to FIS and the financial services sector, using frameworks such as MITRE ATT&CK and structured analytic techniques.
• Manage and optimize intelligence collection, including commercial platforms, open-source intelligence, information-sharing communities, and internal security telemetry, ensuring collection aligns with Priority Intelligence Requirements (PIRs) and stakeholder needs.
• Produce and review actionable intelligence for technical and executive audiences, clearly communicating threat relevance, potential impact, analytic confidence, and recommended actions to support informed security decision-making.
• Partner with SOC, Incident Response, Vulnerability Management, Attack Surface Management, and other security teams to translate intelligence into threat hunting, detection, vulnerability prioritization, investigations, and proactive defensive actions.

What you bring

• 7+ years of cybersecurity experience, including 4+ years of experience in Cyber Threat Intelligence or a closely related security intelligence discipline.
• Previous experience leading or maturing a Cyber Threat Intelligence program or function.
• Excellent verbal and written communication skills, with the ability to communicate complex cyber threats clearly to both technical and executive audiences.
• Strong understanding of cyber threat actors, malware, attack techniques, vulnerability exploitation, and the broader cyber threat landscape.
• Experience using threat intelligence, SIEM, EDR, and other security platforms to investigate threats and support intelligence-driven security operations.
• Experience producing intelligence assessments and translating technical findings into actionable business and security recommendations.
• A bachelor's degree in computer science, cybersecurity, intelligence studies, or a related field, or equivalent professional experience.

Bonus if you have

• Experience working in financial services, payments, fintech, or another highly regulated industry.
• Experience with commercial threat intelligence platforms, intelligence-sharing communities, and security automation.
• Relevant certifications such as GCTI, GCIH, CISSP, CISM, or equivalent advanced cybersecurity/intelligence certifications.

What we offer you

• Attractive benefits including private medical cover, dental cover, and travel insurance.

A multifaceted job with a high degree of responsibility and a broad spectrum of opportunities.

The chance to work on some of the most challenging, relevant issues in financial services & technology.

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Noti