Threat Intelligence Specialist

• Plays a critical role in U.S. Bank’s compliance with regulatory requirements under sections 314(a) and 314(b) of the USA PATRIOT Act
• Responsible for managing regulatory information sharing requests and responses
• Reviewing subpoenas related to potential money laundering
• Analyzing Investigative Referral Forms for indications of money laundering or terrorist financing
• Addresses fraud-related matters and conducts reviews involving Elder and Vulnerable Adult Financial Exploitation (EVAFE), including coordinating with Adult Protective Services when appropriate

Human Intelligence Analyst

Security Analyst

• Plan & Execute AI-Enhanced Attacks: Lead red team operations and penetration tests that incorporate LLM-driven techniques and agentic automation to simulate sophisticated adversaries at scale.
• Maintain human-in-the-loop oversight to ensure safe, controlled execution.
• Custom Tooling & Automation: Design or integrate custom offensive tools and scripts that use AI/ML (e.g. LLM APIs, automation frameworks) to accelerate vulnerability discovery, exploit development, and testing workflows.
• For example, develop internal frameworks that interface LLMs with red team C2 platforms (like MythicMCP, SliverMCP) to enable autonomous or semi-autonomous operations.
• Adversarial Simulation & Fraud Testing: Conduct adversarial exercises targeting both technical systems and fraud controls, using AI to emulate how attackers might abuse scale and automation.
• Work with fraud risk teams to simulate large-scale abuse scenarios (bots, deepfakes, automated scams) using AI capabilities.
• Collaboration & Purple Teaming: Partner closely with blue teams (SOC, Detection Engineering) and fraud prevention teams to share insights from AI-augmented tests.
• Help validate and improve detection and response for AI-driven attack techniques through joint purple team exercises.
• Reporting & Knowledge Sharing: Document attack scenarios, findings, and mitigations in clear reports. Present results and risk insights to both technical staff and executives, translating complex AI-augmented attack methods into actionable defense improvements.
• Mentor colleagues in adopting AI-assisted tools and foster a culture of innovation in the team.

Adversarial AI, Offensive Security Analyst

• Each Intelligence Analyst works as part of a DarkTower Intelligence Cell and is responsible for providing open source cyber intelligence to our clients, based on collection topics and strategies determined to be most relevant to their brand.
• Demonstrate research, analytical and communication skills by effectively identifying potential threats, determining levels of risk, and producing actionable intelligence reports for a variety of audiences.
• Leverage professional presentation skills by reviewing/presenting information in front of team members and company leadership.
• Translate technical indicators into layperson’s terms.
• Work closely with other areas of the intelligence team when serious threats are identified to identify appropriate solutions.
• Passionate about technology and identifying threats, able to learn new investigative techniques and technical solutions rapidly.

Intelligence Analyst

• Collaborating with security engineering teams to create and test detection rules.
• Investigating potential cybersecurity incidents.
• Developing response processes and training security operations staff.
• Reviewing and tracking detected events to identify new exploits, threats and mitigation strategies, and enforce incident reporting standards.
• Leading in-depth technical analysis of new and emerging information security threats.
• Analyzing threats and vulnerabilities to determine their impact to the bank's operations.
• Assisting with investigations and eDiscovery efforts involving court-proven forensic processes and technologies.

Lead Threat Hunter

• Maintain and enhance the organization’s data security posture across both cloud and on-premises environments.
• Contribute to strengthening protection around sensitive information ensuring that data‑centric security remains foundational across the enterprise.
• Support compliance with evolving data privacy and security regulations, reducing organizational risk and building trust with stakeholders.
• Align cybersecurity practices with business needs and regulatory expectations to promote a strong governance culture.
• Foster greater adoption of data protection best practices by partnering with teams across the organization, reinforcing a consistent and proactive security mindset.

Cybersecurity Analyst – Data Protection

• Lead the development of the Firm’s physical security intelligence program
• Integrate insights from multiple sources to assess the threat landscape
• Collaborate with various teams to enhance security measures
• Provide strategic advice to key stakeholders on security initiatives
• Drive actionable decisions that improve safety and security protocols
• Implement proactive measures to mitigate risks
• Translate complex analysis into clear recommendations for action
• Foster partnerships across the security organization to achieve objectives

Senior Security Intelligence Analyst

• Solve more complex problems, in multiple areas of specialization, with general supervision.
• Develop advanced skills and the ability to work with greater independence.
• Effectively apply fundamental concepts and procedures to work that are complex and varied.
• Serve as the primary cyber security resource supporting MNS while also contributing to fleet-wide initiatives across Duke Energy's nuclear generating stations.
• Ensure compliance with various cybersecurity standards and requirements such as: IT503, IT505, CS 220, NERC CIP, NIST CSF, NIST 800, NARUC, TSA, and NRC 10 CFR 73.54.
• Lead the development, support, and ongoing strategy of their business unit’s cybersecurity program.
• Provide direct service and support to all nuclear generating stations to ensure compliance with the Nuclear Regulatory Commission regulated Duke Energy Nuclear Cyber Security Plan and requirements.

Operations Cybersecurity Analyst

• Support the planning, coordination, and implementation of the organization's information security programs.
• Maintain and enhance the security infrastructure, including firewalls, IDS/IPS, log aggregation, and file integrity monitoring systems.
• Address potential threats and vulnerabilities.
• Investigate and resolve data security issues by working closely with teams.
• Administer and manage firewall systems, intrusion detection and prevention systems (IDS/IPS), log aggregation systems, web traffic filtering appliances, and file integrity monitoring applications.
• Design, implement, and monitor security measures for LAN/WAN environments to safeguard information systems.
• Monitor systems for potential threats and respond promptly to security incidents.
• Facilitate the identification of current security infrastructure and define requirements for future programs.
• Collaborate with teams to implement encryption techniques and deploy security tools effectively.
• Document security incidents, system configurations, and process changes.

• Developing and maintaining Threat Models
• Analyzing Threat Intelligence Data
• Mapping Threats to the Kill Chain and MITRE ATT&CK Framework
• Communicating Findings
• Collaborating with Security Teams
• Contributing to Threat Hunting Efforts
• Staying Current with the Threat Landscape
• Automating and Improving Modeling Processes

Cyber Threat Intelligence Analyst

• Monitor threats against Cisco executives and personnel via vendor intelligence feeds, law enforcement reports, and OSINT research, triaging and escalating based on an established risk matrix
• Produce and deliver risk assessments and recommendations ahead of executive travel and perform active monitoring of intelligence feeds to mitigate travel disruptions and risks
• Conduct security investigations and maintain awareness of persons of interest (POIs) and potential hostile actors
• Draft recurring reports analyzing internal threat metrics, emerging security TTPs, and geopolitical, cyber, and physical threats that may impact leadership, assets, or operations
• Contribute to ad-hoc advisories, presentations, and projects on executive security, internal risk, and travel risk management, collaborating with STO Global Security, Executive Protection teams, and partners
• Coordinate with Cisco vendors, internal stakeholders, and public/private partners to refine tooling, configure intelligence feeds, and liaise on risk concerns
• Provide on-site or remote intelligence support for corporate events, shareholder meetings, and high-profile engagements; assist with pre-event security planning

Protective Intelligence Analyst

• Support our healthcare partners and help them thrive at Meduit
• Investigate and respond to alerts from vulnerability scanning, endpoint security, endpoint detection and response (EDR), and intrusion detection and response (IDR) tools
• Monitor and manage identity security, MFA, and Conditional Access within Azure/Entra ID
• Document security investigations, findings, and remediation actions
• Collaborate with IT and cross-functional teams to resolve security issues and improve security controls

CyberSecurity Analyst

• Investigate and respond to alerts from vulnerability scanning, endpoint security, endpoint detection and response (EDR), and intrusion detection and response (IDR) tools
• Monitor and manage identity security, MFA, and Conditional Access within Azure/Entra ID
• Document security investigations, findings, and remediation actions
• Collaborate with IT and cross-functional teams to resolve security issues and improve security controls

• Lead the planning, coordination, scheduling, and execution of tabletop exercises focused on emerging threats and resiliency capabilities.
• Partner closely with application, infrastructure, identity, cloud, backup, and security teams to coordinate participants and timelines.
• Design and facilitate threat‑informed tabletops, execute hands‑on recovery scenarios, validate recovery runbooks through execution, and assess key technical resiliency capabilities.
• Ensure that risks to all information assets are being managed in a timely and effective manner to meet the Information Security Program requirements and current threat landscape.
• Provide vision, direction, and expertise to more experienced leadership on implementing innovative and significant business solutions that are large-scale, cross-functional, or companywide strategies.
• Ensure the team has the necessary training and is keeping abreast of regulatory and compliance issues.
• Engage with all levels of professionals and managers companywide and serve as an experienced advisor to leadership.

See all jobs on JobTailor

Human Intelligence Analyst

Adversarial AI, Offensive Security Analyst

Intelligence Analyst

Lead Threat Hunter

Cybersecurity Analyst – Data Protection

Senior Security Intelligence Analyst

Operations Cybersecurity Analyst

Security Analyst

Cyber Threat Intelligence Analyst

Protective Intelligence Analyst

CyberSecurity Analyst

CyberSecurity Analyst

Senior Lead Information Security Analyst