Protect Alliant and its members by operationalizing threat intelligence and supporting threat-informed defense activities. Triage and assess incoming intelligence to identify actionable risks, support adversary emulation efforts to simulate real-world attack scenarios and uncover visibility gaps. Communicate findings and maintain documentation of threat scenarios and recommendations and support continuous improvement in detection and response capabilities.
Essential Responsibilities
- Collect, analyze, and triage tactical and operational cyber threat intelligence from internal, open-source, government, industry, and commercial intelligence sources.
- Operate and continuously enhance the Threat Intelligence Platform (TIP) to ensure threat intelligence is relevant, actionable, and effectively operationalized across cybersecurity, fraud, and risk management functions.
- Enrich and contextualize indicators of compromise (IOCs) for use in threat detection and response workflows.
- Monitor emerging threats, vulnerabilities, attack techniques, and threat actor activity relevant to Alliant and the financial sector.
- Develop and maintain profiles of malware families and threat actors most likely to impact Alliant, including their motives, intent, and capabilities.
- Map operational intelligence to MITRE ATT&CK tactics and techniques to inform detection engineering, threat hunting, purple team exercises, and security control assessments.
- Contribute to finished intelligence products, supporting both technical and non-technical stakeholders.
- Support adversary emulation and purple team campaigns by researching threat actors, malware families, attack techniques, and intelligence requirements used to construct realistic testing scenarios.
- Contribute threat intelligence that informs campaign planning, ATT&CK mapping, scenario development, and security control validation activities.
- Support adversary emulation activities through intelligence preparation, operational research, evidence collection, and after-action analysis.
- Support SOC investigations by identifying relevant indicators and adversary behaviors.
- Support Third-Party Risk Management (TPRM) activities by analyzing cyber threats effecting vendors, service providers, and supply chain partners and assessing their potential impact.
- Support the Fraud Operations team through intelligence on cyber-enabled fraud threats, including account takeover, credential theft, phishing, business email compromise (BEC), synthetic identity fraud, social engineering, and payment fraud.
- Protect Alliant, it's members, and it's brand by monitoring and responding to online impersonation, counterfeiting, infringement other malicious activities that may harm the organization.
- Support tabletop exercises (TTX) through threat research, scenario development support, participant coordination, and after-action documentation.
Education & Years of Experience
- Minimum - 4 Year Bachelors Degree in Computer Science, Cybersecurity, Information Technology or Related
- Minimum - 0 years
- Preferred - 2 of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related
In Lieu of Education
- 2 years of Cyber Threat Intelligence, Offensive Security, Threat Hunting, Detection Engineering or related
License/Certifications/Training
- Preferred - Security+, or similar entry-level cybersecurity certifications
- Preferred - Exposure to threat intelligence platforms or scripting (Python)
- Preferred - Military training or equivalent experience
Compensation & Benefits:
Typical hiring range: $69,600.00 to $108,300.00 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge.
Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match including:
- Annual performance bonus
- Work from home up to 3 days a week
- Paid parental leave
- Employee discount programs
- Time off including paid personal and sick days
- 11 paid holidays
- Education reimbursement
*Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment.
Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.
The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.