Senior Information Security Analyst

Jobtailor; New Jersey; On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor is seeking an experienced Information Security professional based in the United States (New Jersey) to define and implement technology controls, assess risks, and deliver actionable cyber and fraud intelligence. The role requires deep threat actor analysis, vulnerability assessments, and automation for threat analysis.

The candidate will collaborate with stakeholders, provide briefings on emerging threats and regulatory requirements, and help drive security controls across the

Qualifications

• 5-7 years of relevant experience
• Experience with MITRE ATT&CK and Cyber Kill Chain
• Experience with CVE/CVSS and patch data
• Experience with threat intelligence and automation
• Ability to triage SIEM events
• Occasional domestic travel

Responsibilities

• Define and implement Technology Controls / Information Security policies, programs, and tools
• Assess risks, identify gaps, and develop security solutions to mitigate risks
• Provide complex reporting, analysis, and assessments at multiple levels
• Deliver timely cyber and fraud intelligence across follow-the-sun model
• Monitor threats from internal and external sources
• Advise stakeholders with technical briefings on threats and standards
• Identify process improvements to meet production schedules
• Triage complex SIEM events and coordinate with Security Operations

Skills

Information Security

Threat Actor Analysis

MITRE ATT&CK

Vulnerability Analysis

SIEM Triage

Education

Bachelor's degree preferred

Tools

SIEM Tools

OSINT Tools

Dark Web Monitoring

Technical Research Tools

Automation Tools

Job description

• Define, develop, and/or implement Technology Controls / Information Security policies, programs, and tools
• Provide specialized expertise and guidance on assessing risks, identifying gaps, and developing security solutions to mitigate risks and protect the Bank
• Participate in projects of moderate to high complexity
• Provide complex reporting, analysis, and assessments at the functional, business line, or enterprise level
• Deliver timely, actionable cyber and fraud intelligence across TD’s follow-the-sun model
• Maintain knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces
• Monitor internal and external sources for relevant cyber and fraud threats, risks, and events
• Assess threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures
• Analyze vulnerabilities and AI-amplified exploitation to guide remediation priorities
• Partner with Security and Fraud Operations to provide actionable intelligence, triage complex SIEM events, and mitigate threats
• Advise stakeholders and deliver technical briefings on emerging threats, regulatory requirements, and banking and technology standards
• Maintain expertise in common fraud threats
• Identify process improvements, promote risk-reducing behaviors, and manage priorities to meet production schedules

Requirements

• Bachelor's degree preferred
• Information security certification / accreditation an asset
• 5-7 years of relevant experience
• Experience assessing threat actors’ capabilities, intent, targeting, tactics, techniques, and procedures using OSINT, dark web monitoring, internal telemetry, and technical research
• Experience with intelligence frameworks and methods, including MITRE ATT&CK, Cyber Kill Chain, the Diamond Model, attribution analysis, and analysis of competing hypotheses
• Experience with vulnerability and AI-amplified exploitation analysis using CVE, CVSS, exposure, and enterprise patching data
• Experience with AI, scripting, and automation for threat analysis, attribution, and assessment
• Knowledge of emerging threats, cybercriminal ecosystems, ransomware, initial access brokers, and underground marketplaces
• Advanced knowledge of technology controls / security domains, disciplines, and practices
• Proficient to advanced knowledge of organization, technology controls, security, and risk issues
• Ability to triage complex SIEM events
• Knowledge of cyber and fraud threats, including ransomware, account takeover, compromised credentials, phishing, smishing, account fraud, and impersonation scams
• Occasional domestic travel
• Ability to perform sedentary work, multiple tasks, operate standard office equipment, concentrate for long periods, and read, write, and comprehend instructions continuously
• Ability to lift/carry under 25 lbs. occasionally

Core Competencies

Demonstrates expertise in Information Security policies, risk assessment, and threat analysis, with a strong focus on emerging cyber threats and fraud intelligence. Proficient in utilizing intelligence frameworks and automation tools to enhance security measures and mitigate risks.

Highest-signal resume keywords

• Information Security Certification
• Threat Actor Analysis
• MITRE ATT&CK Framework
• Vulnerability Analysis
• SIEM Event Triage

Hard Skills

• Risk Assessment
• Threat Analysis
• Vulnerability Analysis
• Cybersecurity Policies
• Automation for Threat Analysis
• Technical Research
• Fraud Intelligence
• Cyber Kill Chain
• CVE and CVSS Knowledge
• Process Improvement

Soft Skills

• Stakeholder Communication
• Analytical Thinking
• Problem Solving
• Prioritization
• Collaboration

Certifications & Qualifications

• Information Security Certification

Industry Keywords

• Cyber Threats
• Fraud Threats
• Ransomware
• Cybercriminal Ecosystems
• Initial Access Brokers
• Underground Marketplaces
• Risk Management
• Security Controls
• Banking Standards
• Regulatory Requirements

Tools & Technologies

• SIEM Tools
• OSINT Tools
• Dark Web Monitoring
• Technical Research Tools
• Automation Tools