Senior Cyber Threat Intelligence Analyst

KeyCorp; Brooklyn (OH); On-site; USD 96,000 - 181,000; Full time

Benefits offered by this job

Equal Opportunity Employer

Flexible in-office policy

Professional development opportunities

Job summary

KeyBank is seeking a Senior Cyber Threat Intelligence Analyst to advance the CTI program by turning external and internal threat insights into strategic intelligence for business decisions and risk management.

You will produce executive-level intelligence, support Board/regulator briefings, and guide leadership on resource prioritization based on exposure and risk.

Qualifications

• Bachelor's degree in CS, Cybersecurity, or related field (or equivalent).
• 5+ years in CTI with senior decision-maker briefings.
• Experience linking threat intel to security controls and risk priorities.
• Strong analytical, research, and writing abilities.
• Ability to work independently and elevate risks appropriately.
• Proven communication skills with executives.

Responsibilities

• Aggregate and synthesize threat intel from OSINT, dark web, and internal sources.
• Produce forward-looking CTI reports and executive briefings.
• Assess financial services threat landscape and regulatory concerns.
• Analyze geopolitical and tech risk impacting KeyBank and customers.
• Translate threats into business impact and prioritize resources.
• Lead threat-to-control gap assessments and risk conversations.
• Collaborate with Cyber Defense, Security Engineering, and Legal teams.
• Mentor junior analysts and drive a culture of continuous learning.
• Represent KeyBank in industry groups and external intelligence exchanges.

Skills

Threat intelligence

Executive briefing

Stakeholder engagement

Research and writing

Independent work

Education

Bachelor's degree in CS / Cybersecurity or related field

Tools

MITRE ATT&CK

D3FEND

Diamond Model

Kill Chain

SIEM

SOAR

Threat Intelligence Platform (TIP)

EDR

Job description

Location

4910 Tiedeman Road, Brooklyn Ohio

Senior Cyber Threat Intelligence Analyst Position Summary

Our Cyber Threat Management team is part of Key's broader Cyber Defense function within Corporate Information Security.

Cyber Defense's mission is simple: We aim to Deter, Detect, Deny, and Disrupt adversaries through proactive threat-centric defense.

This senior strategic role advances KeyBank's Cyber Threat Intelligence (CTI) program by converting external and internal threat information into forward looking intelligence that informs business decisions, cybersecurity strategy, control investments, and enterprise risk management.

The analyst will maintain and refine intelligence requirements, assess the financial services threat landscape, and evaluate geopolitical developments and emerging technology risks that may affect KeyBank, its customers, its third‑party ecosystem, and its long‑term objectives.

The analyst will produce strategic forecasts, control gap assessments, executive level intelligence products, and decision support for senior leaders.

The role will also support briefings for the Board and regulators, translate complex threats into clear business impact, and help leaders prioritize resources based on intelligence, exposure, and risk.

Success requires strong judgment, research, writing, stakeholder engagement, and the ability to deliver accurate, concise, and complete assessments.

Key Responsibilities

• Aggregate, evaluate, and synthesize threat intelligence from diverse sources such as open-source intelligence (OSINT), dark web forums, commercial feeds, and internal sources to identify relevant and actionable strategic insights for the organization.
• Strategic Cyber Threat Intelligence (CTI) Report Writing & Briefing – Produce forward looking assessments, executive summaries and strategic forecasts on adversaries, campaigns, geopolitical developments, regulatory concerns, and technology driven risks.
• Establish feedback measures that assess whether intelligence products are timely, relevant, actionable, and aligned to stakeholder needs.
• Analyze the financial services industry threat landscape, including threats to banking operations, customers, payments, third parties, critical infrastructure, and sector confidence.
• Evaluate emerging technology risks involving technologies such as artificial intelligence, cloud services, quantum computing).
• Deep understanding of Threat Actor (TA) Tactics, Techniques, & Procedures (TTPs) and Indicators of Compromise (IOCs) utilized by cyber adversaries with the ability to identify new and novel TTP’s.
• Provide intelligence support during significant incidents or emerging threat events by clarifying context, likely implications, and potential future developments.
• Conduct threat to control gap assessments by comparing relevant adversary capabilities and attack paths with existing security controls, risk treatments, and business dependencies.
• Familiarity with leveraging frameworks (MITRE ATT&CK, D3FEND, Diamond Model, Kill Chain), security platforms like Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Platform (TIP), and Endpoint Detection and Response (EDR).
• Apply intelligence led prioritization to help focus defensive resources, control improvements, threat hunting, vulnerability management, exercises (tabletop, red / blue / purple), and risk decisions on the threats most relevant to KeyBank.
• Partner with Cyber Defense, Security Engineering, Fraud, Third-Party Risk Management, Third-Party Security, Technology, Legal, and other teams to assess and communicate cyber risks.
• Provide mentorship and technical guidance to junior analysts and cross functional partners.
• Lead by example in fostering a culture of curiosity, rigor, and continuous learning within the CTI function.
• Represent KeyBank within intelligence sharing communities, industry working groups, government partnerships, and peer collaboration forums.
• Leverage external partnerships and intelligence exchanges to strengthen organizational awareness and preparedness.

Required Qualifications

• Bachelor’s in Computer Science, Cybersecurity, or related field—or equivalent experience.
• 5+ years in CTI.
• Demonstrated experience managing intelligence requirements and producing strategic intelligence for senior decision makers.
• Strong understanding of the financial services threat environment and the business, operational, customer, third-party, and regulatory impacts of cyber threats.
• Experience assessing geopolitical risk, state-sponsored activity, and emerging technology risks in a business or security context.
• Ability to connect threat information to security controls, business exposure, and risk-based priorities.
• Strong analytical, research, and writing skills.
• Ability to work independently and elevate risks appropriately.
• Ability to communicate concisely, effectively and directly with executive management.

Preferred Certifications

• GIAC Cyber Threat Intelligence (GCTI)
• Certified Information Systems Security Professional (CISSP)
• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA Security+

COMPENSATION AND BENEFITS

This position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually.

Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location.

Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.

Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.

Job Posting Expiration Date: 10/06/2026

KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.

Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [e-mail].

#LI-Remote

KeyBank is an organization collectively committed to helping you unlock your potential and discover what truly drives you. Working here means sharing our purpose to help our clients, colleagues, and communities thrive.

You’ll find genuinely supportive teammates, a flexible, inclusive work environment, challenging projects, accessible leaders, and opportunities to grow in your position and your career.

For 200 years, Key has opened doors in our communities. Let us open one for you.