Title: Cyber Intelligence & Incident Manager

Location: New York, NY (Financial District)

Terms: Full-time, 3 days on-site/2 days remote

Salary: $125k - $135k + bonus

Industry: Banking/Financial Services

Job Summary:

The purpose of this role is to perform specialist Threat Intelligence activities and support technical analysis, incident response and incident management efforts. This position is responsible for the end-to-end lifecycle of threat intelligence, from collection and analysis to dissemination and providing actionable recommendations to mitigate developing threats.

This role also ensures timely communication of developing threats to stakeholders and management by producing strategic and tactical threat assessments to support mitigation activities.

Responsibilities:

Intelligence & Analysis:

Monitor, analyze, and report on the global cyber threat landscape, with a specific focus on threats targeting the financial services sector (e.g., banking trojans, ransomware groups, APTs).
Produce high-quality, finished intelligence products (strategic, operational, and tactical) for diverse audiences, ranging from technical SOC analysts to C-level executives.
Maintain and update detailed threat actor profiles, tracking shifts in intent, capabilities, and strategic objectives.

Incident Response Support Responsibilities:

Serve as an escalation point for security operations during complex incidents
Provide intelligence-based guidance and high-fidelity threat context during an incident.

Collaboration & Communication:

Collaborate with analysts and subject matter experts to leverage their knowledge and expertise.
Strengthen internal threat visibility by fusing intelligence inputs across multiple functions in the organization.
Maintain & establish relationship with wider threat intelligence community, information sharing partners etc.

Miscellaneous responsibilities as required

Experience /Qualifications/Education:

Bachelor’s degree or higher in Information Security, Computer Science, Computer Engineering, or a related field.
A minimum of 5-7 years of experience in Cyber Threat Intelligence, Incident Response, or a related field, preferably the financial sector.
Deep understanding of the intelligence cycle (Direction, Collection, Processing, Analysis, Dissemination, Feedback).
Strong knowledge of the MITRE ATT&CK framework and the Diamond Model of Intrusion Analysis.
Hands-on experience with SIEM tools (e.g., Splunk) and Threat Intelligence Platforms (TIP).
Proficiency in scripting languages (Python, PowerShell, Bash) to automate data collection and analysis tasks.
The following certifications are desired: CISSP, GCTI.

Evrhire

Vacatures

Cyber Security Specialist