Senior Cyber Threat Intelligence Analyst

KeyCorp; Cleveland (OH); Hybrid; USD 96,000 - 181,000; Full time

Job summary

KeyBank is seeking a Senior Cyber Threat Intelligence Analyst to advance the CTI program by turning threat data into forward-looking intelligence for business decisions and risk management.

You will deliver strategic forecasts, executive briefings, and intelligence products for senior leaders, including the Board and regulators, with a focus on financial services threats and emerging tech risks.

Qualifications

• Bachelor’s degree in a relevant field or equivalent experience.
• 5+ years in CTI with demonstrated intelligence production for leadership.
• Ability to translate threat information into business impact.
• Experience briefing executives and regulators.
• Strong research, writing, and communication skills.

Responsibilities

• Aggregate and synthesize threat intelligence from OSINT, dark web, feeds, and internal sources.
• Produce strategic CTI reports, executive summaries, and forecasts for senior leaders.
• Support briefings for the Board and regulators with clear business implications.
• Assess financial services threat landscape and emerging technology risks.
• Lead risk-based prioritization and communicate cybersecurity implications to stakeholders.

Skills

CTI experience

Executive briefing

Threat intel synthesis

Stakeholder engagement

Writing and reporting

Analytical thinking

Independent work

Education

Bachelor’s in computer science or cybersecurity

Tools

MITRE ATT&CK

SIEM

SOAR

Threat intelligence platforms

EDR

OSINT tools

Job description

Location:4910 Tiedeman Road, Brooklyn OhioSenior Cyber Threat Intelligence AnalystPosition SummaryOur Cyber Threat Management team is part of Key's broader Cyber Defense function within Corporate Information Security. Cyber Defense's mission is simple: We aim to Deter, Detect, Deny, and Disrupt adversaries through proactive threat-centric defense.This senior strategic role advances KeyBank's Cyber Threat Intelligence (CTI) program by converting external and internal threat information into forward looking intelligence that informs business decisions, cybersecurity strategy, control investments, and enterprise risk management. The analyst will maintain and refine intelligence requirements, assess the financial services threat landscape, and evaluate geopolitical developments and emerging technology risks that may affect KeyBank, its customers, its third-party ecosystem, and its long-term objectives.The analyst will produce strategic forecasts, control gap assessments, executive level intelligence products, and decision support for senior leaders. The role will also support briefings for the Board and regulators, translate complex threats into clear business impact, and help leaders prioritize resources based on intelligence, exposure, and risk. Success requires strong judgment, research, writing, stakeholder engagement, and the ability to deliver accurate, concise, and complete assessments.Key ResponsibilitiesAggregate, evaluate, and synthesize threat intelligence from diverse sources such as open-source intelligence (OSINT), dark web forums, commercial feeds, and internal sources to identify relevant and actionable strategic insights for the organization.Strategic Cyber Threat Intelligence (CTI) Report Writing & Briefing - Produce forward looking assessments, executive summaries and strategic forecasts on adversaries, campaigns, geopolitical developments, regulatory concerns, and technology driven risks.Establish feedback measures that assess whether intelligence products are timely, relevant, actionable, and aligned to stakeholder needs.Analyze the financial services industry threat landscape, including threats to banking operations, customers, payments, third parties, critical infrastructure, and sector confidence.Evaluate emerging technology risks involving technologies such as artificial intelligence, cloud services, quantum computing).Deep understanding of Threat Actor (TA) Tactics, Techniques, & Procedures (TTPs) and Indicators of Compromise (IOCs) utilized by cyber adversaries with the ability to identify new and novel TTP’s.Provide intelligence support during significant incidents or emerging threat events by clarifying context, likely implications, and potential future developments.Conduct threat to control gap assessments by comparing relevant adversary capabilities and attack paths with existing security controls, risk treatments, and business dependencies.Familiarity with leveraging frameworks (MITRE ATT&CK, D3FEND, Diamond Model, Kill Chain), security platforms like Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Threat Intelligence Platform (TIP), and Endpoint Detection and Response (EDR).Apply intelligence led prioritization to help focus defensive resources, control improvements, threat hunting, vulnerability management, exercises (tabletop, red / blue / purple), and risk decisions on the threats most relevant to KeyBank.Partner with Cyber Defense, Security Engineering, Fraud, Third-Party Risk Management, Third-Party Security, Technology, Legal, and other teams to assess and communicate cyber risks.Provide mentorship and technical guidance to junior analysts and cross functional partners.Lead by example in fostering a culture of curiosity, rigor, and continuous learning within the CTI function.Represent KeyBank within intelligence sharing communities, industry working groups, government partnerships, and peer collaboration forums.Leverage external partnerships and intelligence exchanges to strengthen organizational awareness and preparedness.Required QualificationsBachelor’s in Computer Science, Cybersecurity, or related field—or equivalent experience5+ years in CTI.Demonstrated experience managing intelligence requirements and producing strategic intelligence for senior decision makers.Strong understanding of the financial services threat environment and the business, operational, customer, third-party, and regulatory impacts of cyber threats.Experience assessing geopolitical risk, state-sponsored activity, and emerging technology risks in a business or security context.Ability to connect threat information to security controls, business exposure, and risk-based priorities.Strong analytical, research, and writing skills.Ability to work independently and escalate risks appropriately.Ability to communicate concisely, effectively and directly with executive management.Preferred CertificationsGIAC Cyber Threat Intelligence (GCTI)Certified Information Systems Security Professional (CISSP)CompTIA Cybersecurity Analyst (CySA+)CompTIA Security+COMPENSATION AND BENEFITSThis position is eligible to earn a base salary in the range of $96,000.00 - $181,000.00 annually. Placement within the pay range may differ based upon various factors, including but not limited to skills, experience and geographic location. Compensation for this role also includes eligibility for incentive compensation which may include production, commission, and/or discretionary incentives.Please click here for a list of benefits for which this position is eligible.Key has implemented an approach to employee workspaces which prioritizes in-office presence, while providing flexible options in circumstances where roles can be performed effectively in a mobile environment.Job Posting Expiration Date: 10/06/2026 KeyCorp is an Equal Opportunity Employer committed to sustaining an inclusive culture. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, pregnancy, disability, veteran status or any other characteristic protected by law.Qualified individuals with disabilities or disabled veterans who are unable or limited in their ability to apply on this site may request reasonable accommodations by emailing [e-mail].#LI-Remote