A bit about us:

Zions Bancorporation's Enterprise Technology and Operations (ETO) team is transforming what it means to work for a financial institution. We operate in a fast-paced, information-driven environment, which means we need people who bring diverse experiences, perspectives, and expertise to meet the ever-changing demands of a technology-driven world. We are grounded in the belief that "improving the work is the work" as we drive to create simple, easy, fast, and secure solutions for our customers. Your ability to adapt, learn, and innovate helps increase revenue, reduce operational costs, and mitigates risk.

ETO provides opportunities for you to own your career growth through Diversity, Equity, and Inclusion, Women in Technology, and Workforce of the Future initiatives that allow you to network across the organization, volunteer in our community, and build your technical and soft skills. Together we are building a culture that values diversity and creates a space of belonging for all our team members. We believe that investing in your success is an investment in our customers and our business. Our people are what sets us apart and make us great.

Enterprise Information Security (EIS) is integrated with the ETO division (1100+ technical people) and is responsible for enabling secure innovation and business growth for 10,000+ employees across 11 states. EIS is undergoing rapid growth and we're focused on creating a relevant program that will enable our organization's long-term success. What's great about our department is that we laugh with each other, have Executive and Board level visibility and support for our work, and are driving highly visible, enterprise-wide initiatives. We're focused on creating business value and are seeking like-minded professionals to join our team!

We are currently seeking a Cyber Threat Intelligence Analyst. As the Cyber Threat Intelligence Analyst, you will play a key role in identifying emerging cyber threats, authoring reports that will inform executives and help mature and expand our cyber threat intelligence practice. This includes:

• Working as a liaison with other financial institutions, government agencies and industry work groups.
• Briefing both technical and non-technical audiences on relevant cyber threats, including executive management through reports and presentations.
• Provide real time support to incident response teams both leading up to and during the incident management process.
• Inform incident response and vulnerability teams on relevant threats and risks.
• Other duties as assigned.

Your experiences and skills:

• Hand-on experience in security operations (commercial SIEM platforms).
• Strong knowledge and experience with threat intelligence (commercial CTI platforms such as Recorded Future, FireEye, Anomali).
• Experience with vulnerability management platforms (Tenable, InsightVM, Nessus, Qualys).
• Demonstrated understanding of the Cyber Threat Intelligence Lifecycle, including network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set Tactics, Techniques, and Procedures (TTPs).
• Advanced understanding of advanced persistent threats (APTs) / Hacktivist groups and how they operate.
• Experience in using TOR to navigate the dark/deep web.
• Experience in Open Source intelligence (OSINT) analysis.
• Have an ability to map threat actor activities to MITRE ATT&CK Matrix.
• Knowledge of malware analysis concepts and methods and techniques.
• Programming in Python or other languages.
• Exposure/proficiency to languages such as Russian, Chinese, etc. is a plus.
• Ability to generate reports and presentations that illustrate research through visualizations, charts, graphs, infographics, and evidence capture for technical and non-technical audiences.
• Provide input and leadership for the development of objectives, key results, and program metrics.
• Relevant professional cybersecurity certifications.
• Requires a Bachelor's in Information Technology, Computer Science or related field.
• 6+ years in information security, threat intelligence, intelligence source collection, development and correlation with information requirements and basic Intelligence analysis and production concepts or other directly related experience.
• Experience specific to the cyber threat environment in the financial sector, experience with analytical tools and processes is preferred.
• A combination of education and experience may meet qualifications.

This opportunity can be located in our brand new Zions Technology Center or 100% remote within the United States.

(We have a hybrid schedule of 3 days in the office and 2 days at home if you are within the Salt Lake City area)

Pay Range: $100,000 - 130,000