Threat Intelligence Analyst III

At FS-ISAC, how we work matters as much as what we do. We believe in:

• Strengthening collaboration across FS-ISAC, its membership, and strategic partners.

• Teamwork and collective success.

• Humility and curiosity to grow, learn, and continuously improve.

• Role modeling a culture of open, constructive feedback – both giving and receiving.  

• Acting with integrity and accountability, upholding our policies, and making principled decisions that reflect our commitment to doing what is right. 

The Threat Intelligence Analyst III is a senior cybersecurity professional responsible for leading complex cyber threat intelligence analysis and producing high-impact intelligence products that support the security and resilience of the global financial sector. This role independently researches advanced threats, threat actors, cyber campaigns, geopolitical developments, and emerging risks to deliver actionable intelligence and strategic insights.

Working with minimal supervision, the analyst serves as a trusted advisor to members, leadership, and industry partners; leads intelligence initiatives; supports organizational strategy; and mentors’ junior analysts while advancing intelligence-sharing efforts across the financial sector.

• Lead complex intelligence investigations involving cyber threat actors, ransomware operations, nation-state activity, vulnerabilities, and emerging threats.

• Collect, correlate, and analyze intelligence from technical and non-technical sources.

• Produce tactical, operational, and strategic intelligence assessments for members and stakeholders.

• Analyze adversary tactics, techniques, and procedures (TTPs) and map findings to frameworks such as MITRE ATT&CK.

• Assess the impact of cyber incidents, geopolitical developments, technology trends, and systemic risks affecting the financial sector.

• Author intelligence reports, threat assessments, alerts, white papers, and executive briefings.

• Present intelligence findings and risk recommendations to executives, members, and external partners.

• Translate technical intelligence into actionable business and risk-management insights.

• Lead information-sharing initiatives, intelligence exchanges, and member engagement activities.

• Build and maintain relationships with financial institutions, government agencies, law enforcement, and industry partners.

• Represent the organization at conferences, webinars, and industry forums.

• Leverages AI to enhance analysis, decision-making, productivity, and innovation. Maintains awareness of emerging AI technologies, threats, and risks.

• Contribute to intelligence strategy, collection priorities, and analytical standards.

• Identify opportunities to improve intelligence methodologies, workflows, automation, and reporting capabilities.

• Lead cross-functional projects and support organizational cyber resilience initiatives.

• Mentor Threat Intelligence Analyst I and II team members and provide analytical coaching and product reviews.

• Promote best practices in intelligence collection, analysis, reporting, and information sharing.

• Threat Intelligence Platforms (TIPs)

• Security Information and Event Management (SIEM) technologies

• Intelligence automation and enrichment tools

• Threat hunting platforms

• Malware analysis tools and techniques

• Open-Source Intelligence (OSINT) research methodologies

• Scripting and analytical tools (e.g., Python, PowerShell, SQL)

• Microsoft Office applications, particularly Excel, PowerPoint, and Word

Employees are expected to maintain a professional work environment and be able to perform the essential functions of the role. Reasonable accommodation may be made to enable individuals with disabilities to perform these functions. This job description is intended to describe the general nature and level of work performed and is not an exhaustive list of all responsibilities, duties, or skills required. Job duties may be modified or assigned as business needs evolve.