Bank Of America Cyber Threat Intelligence Collections & Engagement Analyst 

United States, District of Columbia, Washington 

501441537

Job Description:

The Cyber Threat Intelligence Enterprise Engagement Sr. Analyst (EEA) reports directly to the Cyber Threat Intelligence (CTI) Engagement Manager (EM). The EEA maintains an up-to-date understanding of the threats posed to BAC and our customers from nation-state and cybercriminal actors. The position requires the analyst to be able to independently monitor, identify, and track current or developing threats from a variety of threat actors. The EEA is responsible for managing collections requirements and drafting threat intelligence into briefing materials and communications. The analyst must demonstrate exceptional organizational and cross-functional communication skills to work closely with other elements of GIS and elsewhere to integrate information from across the Enterprise. The EEA works with partners internally to understand their intelligence needs, develop and deliver quality intelligence support that empowers their Line of Business. Works independently with assistance, direction and goal setting form the CTI engagement manager.

Role responsibilities:
• Support the global strategy for Enterprise Engagement with the goal of providing quality intelligence support to the Bank’s lines of business.
• Organizes, plans, identifies, develops, and maintains relationships with new and existing enterprise partners.
• Facilitates two-way information sharing and active collaboration with enterprise partners.
• Maintains a working knowledge of the broad cyber threat and geopolitical landscape to include an up-to-date understanding of the threats posed to the Bank from a variety of cyber threat actors.
• Assists with identifying potential indicators or warnings of a changing threat environment.
• Demonstrates exceptional organizational and cross-functional communication skills to work closely with other elements of GIS and elsewhere to integrate analysis from across the Enterprise.
• Supports existing intelligence production and customer needs through the development of routine and bespoke intelligence products.
• Ensures enterprise partners are aware of the firm’s Standing and Priority Intelligence Requirements; works to develop similar requirements for individual lines of business.
• Communicate complex topics effectively at all management levels of the organizations and educate and advise internal business and technical leaders regarding cyber threats and possible security solutions.
• Present intelligence reports to internal customers, lines of business, senior leadership and others as needed.
• Support operational aspects of CTI Collections Management program and coordinate with global staff and external vendors.
• Support intelligence collections and production management functions, projects and activities.

Required Skills:
• Technical or information security certifications are a strong plus.
• 5+ years experience in cyber threat intelligence.
• 5+ years working in a 24x5 operational environment.
• Experience working in a Security Operations or Fusion Center operation.

Desired Skills:
• Excellent organizational and analytical skills.
• Bachelor’s degree or higher-level education
• Ability to communicate (verbal and written) with executives and stakeholders in non-technical terms while accurately encompassing risk, impact, likelihood, containment and remediation activities, and threat actor techniques, tactics and procedures.
• Excellent written and verbal communication and presentation skills.
• Ability to handle multiple work efforts in a fast-paced environment and to be able to quickly change direction as needed.
• Strong influencing skills.
• Ability to prioritize conflicting tasks.
• Proven experience with cyber threat intelligence related activities.
• Experience in an operations focused information security role.
• Familiarity with cyber threat landscape, geopolitical issues that could have cyber impacts, security vulnerabilities, exploits, malware, digital forensics, network security vulnerabilities, exploits and attacks.
• Ability to work in a strong team-oriented environment with a sense of urgency and resilience while being a self-starter and able to work independently.
• Ability to work effectively with technical and non-technical business owners
• JSM and TIP Experience is a plus

1st shift (United States of America)