Cyber Threat Intelligence Senior Analyst

At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. Responsible Growth is how we run our company and how we deliver for our clients, teammates, communities, and shareholders every day.One of the keys to driving Responsible Growth is being a great place to work for our teammates around the world. We're devoted to being a diverse and inclusive workplace for everyone. We hire individuals with a broad range of backgrounds and experiences and invest heavily in our teammates and their families by offering competitive benefits to support their physical, emotional, and financial well-being.The Cyber Threat Intelligence team works with partners, both internal and external, in order to reduce risk to the Bank and to the financial sector at large. The team provides timely situational awareness, conducts deep analysis of threats, and translates indicators of threat into actionable information to reduce impact to the bank. Stakeholders include cyber-security response teams, internal lines of business, senior leadership, and external organizations such as law enforcement, industry peers, and intelligence sharing partners.The Cyber Threat Intelligence Senior Analyst is responsible for conducting in-depth research, documentation, and intelligence analysis of key cyber threats to develop a comprehensive picture of the cyber threat landscape. This includes research via the use of various sources; development of historical, trend, and link analysis; and written and oral reporting to provide actionable intelligence. The analyst will also work to proactively research new threats and establish trends and patterns among existing attacks to help predict future risks.Responsibilities include, but are not limited to:Working in a tactical/strategic role cultivating intelligence sources, analyzing information, creating intelligence, and hunting for exposures or related incidentsResearching current and emerging threats, malware analysis, campaign assessment, data collection, and analysisResearching threat actors and cultivating and assessing new sources of threat information and intelligenceCollecting, assessing, and cataloguing threat indicators and responsibility for adding context to threat indicators to convey urgency, severity, and credibilityRisk managementMaintaining knowledge of threat landscape by monitoring OSINT and related sourcesTracking cyber threat actors and their infrastructure with a view to disrupting their activityCollaborating with appropriate business partners and lines of business to analyze threatsEscalating issues to management in a timely manner with appropriate information regarding risk and impactExercising independent judgment in methods, techniques, and evaluation criteria for obtaining resultsParticipating in technical bridge lines to facilitate the identification, mitigation, and containment of cyber-security incidentsDrafting well-written analytical assessments and providing briefings to response teams, enterprise counterparts, and senior leadership on key issuesMentoring and developing other analysts on the teamRequired Skills:Minimum of 10 years of InfoSec experience tracking and reporting on cyber threatsExperience as an intelligence analyst, and/or malware analyst is necessaryTechnical or information security certifications are also a strong plusExcellent organizational and analytical skillsAbility to communicate (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact, likelihood, containment and remediation activities, and threat actor techniques, tactics, and proceduresExcellent written and verbal communication skillsAbility to juggle multiple work efforts in a fast-paced environment and to be able to quickly change direction as neededStrong influencing skillsAbility to prioritize conflicting tasksProven experience with Information Security related activitiesExperience in an operations-focused information security roleExperience conducting analysis/investigation and containment of potential data breaches or cyber security incidentsFamiliarity with security vulnerabilities, exploits, malware, and digital forensicsFamiliarity with network security vulnerabilities, exploits, and attacksFamiliarity with most operating systems, particularly UNIX and WindowsAbility to work in a strong team-oriented environment with a sense of urgency and resilience whilst able to work independentlyAbility to work effectively with technical and non-technical business ownersThe candidate should exhibit a firm understanding of the cyber threat landscape.The candidate should be knowledgeable of emerging technologies and trends and should be able to identify strategic trends that may impact the bank based on data from a wide variety of sources.This person must have an inquisitive mindset and be able to translate raw data into actionable intelligence.Desired Skills:Bachelors or higher degree desired.Advanced degree in International Affairs or similar field a strong plus.Technical or information security certifications are also a strong plus.Foreign language fluency (Russian/Arabic/Farsi/Chinese/Korean) desired.Experience reporting on the cybercriminal threatThis job will be open and accepting applications for a minimum of seven days from the date it was posted.Shift:

1st shift (United States of America)Hours Per Week:

40

#J-18808-Ljbffr