Cyber Intelligence & Incident Manager

About the role

The Cyber Intelligence & Incident Manager will lead threat intelligence activities and support incident response for a leading banking institution in New York’s Financial District. The role covers the full intelligence lifecycle—from collection and analysis to dissemination—providing actionable recommendations to protect critical financial assets.

Key responsibilities

• Monitor, analyze, and report on the global cyber threat landscape, focusing on threats targeting the financial services sector.
• Produce strategic, operational, and tactical intelligence products for audiences ranging from SOC analysts to C‑level executives.
• Maintain detailed threat‑actor profiles and track changes in intent, capabilities, and objectives.
• Serve as an escalation point during complex incidents, delivering intelligence‑based guidance and high‑fidelity threat context.
• Collaborate with analysts, subject‑matter experts, and external information‑sharing partners to enhance internal threat visibility.
• Perform miscellaneous duties as required to support the security program.

Required profile

• Bachelor’s degree or higher in Information Security, Computer Science, Computer Engineering, or a related field.
• 5–7 years of experience in cyber threat intelligence, incident response, or a related discipline, preferably within the financial sector.
• Deep understanding of the intelligence cycle and frameworks such as MITRE ATT&CK and the Diamond Model.
• Desired certifications: CISSP, GCTI.

Required skills

• Python scripting
• PowerShell scripting
• Bash scripting
• SIEM platforms (e.g., Splunk)
• Threat Intelligence Platforms (TIP)
• MITRE ATT&CK framework
• Diamond Model of Intrusion Analysis

What we offer

• Competitive salary $125,000‑$135,000 per year plus bonus.
• Full‑time permanent position.
• Hybrid work model: 3 days onsite, 2 days remote.
• Opportunity to work in a leading banking environment in New York’s Financial District.