Senior Cyber Threat Intelligence Analyst

Senior Cyber Threat Intelligence Analyst

Join a mature international team analyzing cyberthreat information from a variety of sources to produce intelligence which effectively communicates threats relevant to Fidelity.

We are seeking a Senior Cyber Threat Intelligence Analyst to join our team to identify, track, and report on cyberthreats relevant to Fidelity. This role sits at the intersection of threat analysis and technical knowledge, requiring someone who can translate raw cyber threat data into actionable intelligence for both operational and executive audiences.

• Triage and enrich indicators of compromise (IOCs), perform basic threat hunting and integrate with security tooling including a threat intelligence platform.
• Ingest, normalize, and correlate structured (e.g., IOC feeds) and unstructured data (e.g., OSINT, dark web, reports) to produce actionable threat intelligence and support detection and response efforts.   
• Assist analysts and incident response during cyber investigations.
• Identify and assess the potential impact of cyberthreat activity, including exploits of vulnerabilities and impact within the financial industry. 
• Evaluate and apply Artificial Intelligence (AI) and Large Language Model (LLM) technologies to expand the cyberthreat intelligence team’s collection, enrichment and analytic capabilities.
• Perform open-source intelligence (OSINT) collection and analysis across dark web forums, social media and threat feeds.
• Map adversary behavior at a granular level and collaborate with stakeholders to develop or refine detection rules and threat mitigation steps.
• Produce finished intelligence products including strategic briefings and tactical advisories tailored to varied audiences (executive management, security operations center, fraud and other stakeholders).
• Participate in information-sharing communities and coordinate with FS-ISAC and trusted industry partners. 

• Qualifications
  Required
• 3+ years of experience in cyber threat intelligence, incident response, or a related security discipline.
• Demonstrated knowledge of named threat actors, Tactics Techniques and Procedures and current threat landscape trends.
• Familiarity with intelligence analysis frameworks and structured analytic techniques (e.g., Diamond Model, Kill Chain, Intelligence Cycle, MITRE ATT&CK, STIX).
• Experience producing written intelligence products for both technical and non-technical audiences.
• Comfort and experience with structured and unstructured data, including indicators, metadata, and contextual threat information.
• Strong interpersonal skills with the ability to work productively as part of a team and alongside key stakeholders.
  Desired
• Strong technical curiosity, including a willingness to explore, experiment, and ask “why” and “how” to drive deeper understanding of cyberthreat events and new technology.
• Knowledge of Mac endpoints and associated threats.
• Experience leveraging AI/LLM tooling to accelerate intelligence workflows.
• Knowledge of Threat Intelligence Platform integrations, API connectors, and automation pipelines. 
• Industry certifications such as GIAC Cyber Threat Intelligence (GCTI), Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Security + and other related credentials.
• Basic scripting or automation experience (e.g., Python or similar) is a plus.
• Knowledge of geopolitical concerns and issues of countries hosting Fidelity businesses and associates.
• Familiarity with malware analysis concepts (static and dynamic), threat hunting, and, at a broad level, how cybercriminals operate. 
• Prior experience in financial services, critical infrastructure, or government intelligence environments. 
• Strong interpersonal skills with the ability to work productively as part of a team and alongside key stakeholders. 
• Presentation skills, verbally communicating threats to both technical and non-technical audiences and using slides effectively. 
• Hands‑on exposure to active nation‑state and cybercriminal threat activity, coupled with practical experience using emerging AI tools and features.
• Opportunity to build new capabilities.undefinedSupport for training, conferences, and certification pursuits.
• A collaborative team environment focused on continuous learning and professional development.