Lead, Tactical Intelligence & Threat-Informed Defense

pru; Newark (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Prudential is seeking a Lead for Tactical Intelligence & Threat-Informed Defense to establish and mature a capability that understands adversaries and translates that knowledge into concrete defensive actions. You will analyze TTPs, attack paths, and tradecraft to guide improvements in detection, prevention, and resilience across the organization.

You will partner with Cyber Defense, Technology Owners, and business stakeholders to deliver intelligence-driven recommendations, strengthen defenses,

Qualifications

• Experience in Cyber Threat Intelligence, Threat Hunting, Incident Response, or related defensive disciplines.
• Strong understanding of adversary tactics, techniques, and procedures across modern tech environments.
• Experience applying MITRE ATT&CK, ATLAS, D3FEND to intelligence and defensive use cases.

Responsibilities

• Analyze adversary TTPs to understand attack execution and threat evolution.
• Assess attack paths and exposures across identity, cloud, endpoint, SaaS, and enterprise tech.
• Translate intelligence into actionable guidance to strengthen detection and response.
• Mentor analysts and establish analytical standards within Threat-Informed Defense.
• Define and track metrics showing the impact of Threat-Informed Defense activities.

Skills

Cyber Threat Intelligence

Threat Hunting

Security Operations

Incident Response

MITRE ATT&CK

ATLAS

D3FEND

Threat Modeling

Adversary TTPs

Intelligence Analysis

Tools

EDR

SIEM

Threat Intelligence Platforms

Job description

Job Classification: Technology - Information Security

Are you interested in building capabilities that enable the organization with innovation, speed, agility, scalability, and efficiency? The Global Technology Operations team takes great pride in our culture where digital transformation is built into our DNA! When you join our organization at Prudential, you'll unlock an exciting and impactful career - all while growing your skills and advancing your profession at one of the world's leading financial services institutions.

Your Team & Role

As the Lead for Tactical Intelligence & Threat-Informed Defense, you will help establish and mature a capability focused on understanding how adversaries operate and translating that knowledge into actionable defensive outcomes.

You will analyze adversary tactics, techniques, procedures (TTPs), attack paths, and tradecraft to identify how threats may impact the organization and where defensive improvements are needed.

Using frameworks such as MITRE ATT&CK, ATLAS, and the Insider Threat Matrix, you will assess adversary behaviors and provide intelligence-driven recommendations that strengthen detection, prevention, response, and resilience. You will work closely with Cyber Defense, Technology Owners, and business stakeholders to improve the organization's ability to detect and mitigate real-world threats.

You will produce intelligence products that help stakeholders understand what threats are relevant, how attacks are executed, where defensive gaps exist, and what actions should be prioritized. Your work will enable security teams to make informed decisions based on adversary activity rather than generic risk assumptions.

As a lead, you will mentor analysts, establish analytical standards and methodologies, and help mature the organization's Threat-Informed Defense capability through continuous collaboration with defensive stakeholders.

Here is What You Can Expect on a Typical Day

• Analyze adversary tactics, techniques, and procedures (TTPs) to understand how attacks are executed and how threat activity is evolving.
• Assess attack paths and exposures across identity, cloud, endpoint, SaaS, and other enterprise technologies.
• Map adversary behavior to security controls, identify defensive gaps, and recommend improvements.
• Translate intelligence insights into actionable guidance that strengthens detection, threat hunting, and defensive capabilities.
• Provide context on vulnerabilities, exposures, and adversary exploitation trends to support risk-based prioritization.
• Produce intelligence products such as threat assessments, TTP analyses, attack path reviews, and briefings.
• Brief stakeholders and translate complex intelligence into actionable recommendations.
• Partner with Information Security, Technology owners, and Business teams to strengthen intelligence-informed defensive strategies and decision-making.
• Incorporate lessons learned from incidents and operational activities to continuously improve intelligence analysis and recommendations.Define and track metrics that demonstrate the effectiveness and impact of Threat-Informed Defense activities.

The Skills & Expertise You Bring

• Strong experience in Cyber Threat Intelligence, Threat Hunting, Security Operations, Incident Response, or related defensive disciplines.
• Deep understanding of adversary tactics, techniques, and procedures and how attacks are executed across modern technology environments.
• Experience applying MITRE ATT&CK, ATLAS, D3FEND, and related frameworks to intelligence and defensive use cases.
• Experience analyzing attack paths and understanding adversary behavior across identity, cloud, endpoint, SaaS, and enterprise environments.
• Ability to translate intelligence findings into actionable defensive recommendations and technical guidance.
• Strong understanding of detection engineering principles and threat hunting methodologies.
• Experience assessing vulnerabilities, exposures, and security controls through an adversarial lens.
• Ability to conduct structured intelligence analysis using methodologies such as hypothesis testing, pattern analysis, and intelligence-driven risk assessment.
• Excellent written and verbal communication skills, with the ability to explain complex technical risks to diverse audiences.
• Experience mentoring analysts and improving analytical quality across intelligence programs.
• Strong stakeholder management and partnership skills with the ability to influence defensive priorities across multiple security functions.
• Experience evaluating and applying AI-driven capabilities, including MCP-enabled tools and agents, to improve intelligence operations, analytical efficiency, and defensive outcomes.

Preferred Qualifications

• Familiarity with EDR technologies and telemetry analysis, including experience with query languages used to identify suspicious behaviors and attacker tradecraft.
• Familiarity with SIEM platforms and security telemetry analysis.
• Experience with data visualization tools (e