Cyber Threat Analyst

About the Role

Protect Alliant and its members by operationalizing threat intelligence and supporting threat-informed defense activities. Triage and assess incoming intelligence to identify actionable risks, support adversary emulation efforts to simulate real-world attack scenarios and uncover visibility gaps. Communicate findings and maintain documentation of threat scenarios and recommendations and support continuous improvement in detection and response capabilities.

Key Responsibilities

• Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
• Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
• Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
• Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
• Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
• Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
• Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
• Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
• Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
• Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
• Support SOC investigations by identifying relevant indicators and adversary behaviors.
• Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats affecting vendors, service providers, and supply chain partners and assessing their potential impact.
• Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
• Protect Alliant, its members, and its brand by monitoring and responding to online impersonation, counterfeiting, infringement, and other malicious activities that may harm the organization.
• Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.

Requirements & Tech Stack

• Minimum - 4 Year Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, or Related.
• Minimum - 0 years of experience.
• Preferred - 2 years of experience in Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering, or related fields.
• In lieu of education: 2 years of experience in Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering, or related fields.

Qualifications

• Preferred - Security+, or similar entry-level cybersecurity certifications.
• Preferred - Exposure to threat intelligence platforms or scripting (Python).
• Preferred - Military training or equivalent experience.

Compensation & Benefits

• Typical hiring range: $69,600.00 to $108,300.00 Annually.
• Benefits: Health care, vision, dental, and 401k with employer match, including:
• Annual performance bonus
• Work from home up to 3 days a week
• Paid parental leave
• Employee discount programs
• Time off including paid personal and sick days
• 11 paid holidays
• Education reimbursement