Threat Intelligence Specialist

• Identify, analyze, and track advanced state-backed orand financially motivated attackers that target cloud ecosystems.
• Hunt through a wide range of data sources to identify malicious campaigns targeting Wiz customers.
• Leverage open and closed-data to track the infrastructure and malware used by advanced actors.
• Investigate and attribute incidents, campaigns, and threat actors to understand more about the attackers and what motivates them.
• Communicate novel findings to multiple audiences, including customers and the public.

Threat Intelligence Researcher – Cloud

• Investigate system-generated alerts, referrals, and account activity to identify suspicious behavior
• Analyze customer and transaction data to detect irregular patterns and potential financial crimes
• Document findings clearly in case management systems, including detailed narratives and SAR filings when required
• Exercise sound judgment to escalate or refer high-risk accounts in accordance with procedures
• Partner with internal teams and serve as a resource on fraud and suspicious activity inquiries
• Ensure compliance with BSA/AML regulations and internal policies through accurate reporting
• Monitor trends and support reporting, metrics, and research to enhance detection strategies
• Continuously build expertise through training, tools, and industry best practices

Financial Intelligence Analyst

• Lead geopolitical and supply chain intelligence efforts in support of global operations, travel security, data center security, executive protection, and market expansion initiatives.
• Monitor and assess global events including armed conflict, terrorism, political instability, sanctions, civil unrest, organized crime, regional escalation, and infrastructure disruption, translating developments into actionable business risk assessments.
• Produce strategic, operational, and tactical intelligence products including forecasts, executive briefings, travel risk assessments, crisis updates, heat maps, geospatial overlays, dashboards, and early warning alerts.
• Identify, integrate, and manage intelligence collection pipelines leveraging open-source intelligence (OSINT), commercial intelligence feeds, geospatial data, proprietary sources, and third-party intelligence platforms.
• Design and automate intelligence workflows, alerting mechanisms, and analytical tooling to improve early warning, monitoring, and decision support capabilities.
• Support supply chain resilience efforts by identifying geopolitical, regional, logistical, and infrastructure-related risks that could impact operations, vendors, personnel, or critical dependencies.
• Partner cross-functionally with Global Security, Legal, Supply Chain, Strategy, Infrastructure, and business leadership teams to operationalize intelligence and support risk-informed decision making.
• Conduct post-incident analysis and lessons-learned reviews following geopolitical events, operational disruptions, or security incidents.
• Establish best practices, technical standards, and scalable processes for geopolitical and operational threat intelligence.
• Serve as a subject matter expert on geopolitical risk, strategic warning, and intelligence-driven security operations.
• Maintain relationships with external intelligence vendors, industry peers, academic institutions, and government or law enforcement partners, where appropriate.
• Mentor and guide junior analysts or engineers, share domain knowledge, and contribute to continuous improvement of the team.

Senior Threat Intelligence Specialist – Supply Chain, Geopolitical Security

• Deliver high-quality market research
• Conduct competitor analysis
• Provide strategic insights to support business development and firm leadership
• Monitor industry trends
• Track lateral moves
• Produce actionable intelligence reports

Competitive Intelligence Analyst

• Monitor threats against Cisco executives and personnel via vendor intelligence feeds, law enforcement reports, and OSINT research, triaging and escalating based on an established risk matrix
• Produce and deliver risk assessments and recommendations ahead of executive travel and perform active monitoring of intelligence feeds to mitigate travel disruptions and risks
• Conduct security investigations and maintain awareness of persons of interest (POIs) and potential hostile actors
• Draft recurring reports analyzing internal threat metrics, emerging security TTPs, and geopolitical, cyber, and physical threats that may impact leadership, assets, or operations
• Contribute to ad-hoc advisories, presentations, and projects on executive security, internal risk, and travel risk management, collaborating with STO Global Security, Executive Protection teams, and partners
• Coordinate with Cisco vendors, internal stakeholders, and public/private partners to refine tooling, configure intelligence feeds, and liaise on risk concerns
• Provide on-site or remote intelligence support for corporate events, shareholder meetings, and high-profile engagements; assist with pre-event security planning

Protective Intelligence Analyst

• Execute Guardian’s cyber incident response strategy, acting swiftly to identify, contain, and eradicate security incidents
• Conduct thorough investigations of security events and coordinate recovery efforts with other teams to restore normal operations
• Create detailed reports on incident response activities, findings, and recommendations, and maintain accurate records of investigations and outcomes
• Respond to data loss prevention events to prevent unauthorized access and exfiltration of sensitive data
• Proactively search for cyber threats within the network using advanced techniques; identify patterns, anomalies, and potential indicators of compromise
• Perform forensic analysis on compromised systems and collect evidence in accordance with legal and regulatory requirements
• Stay informed on current and emerging cyber threats that may impact the organization
• Perform regular threat hunts to contribute to our proactive defense program
• Identify use cases for detection engineering to strengthen Guardian’s security posture
• Collaborate across multiple teams and business units.
• Strategically use AI-powered solutions to improve detection, investigation efficiency, and overall cyber resilience.
• Provide Tier 2 support for the Cyber Defense Operations Team, working closely to identify and respond to potential threats

Cyber Incident Responder, Threat Hunter

• Analyze data to generate insights that inform strategy, planning, and performance measurement
• Partner with social content team, fan engagement, media, and commercial teams to define metrics, standardize definitions, and ensure consistent performance tracking
• Develop and maintain data tracking schedule to fill data gaps across platforms
• Monitor data and API connections in Fivetran and communicate errors and findings to database solutions team
• Maintain manual data entry and export/upload process for platforms with API gaps
• Build, maintain, and evolve dashboards and recurring reporting that track fan engagement, growth, and business performance against core KPIs
• Conduct ad-hoc, exploratory, and deep-dive analyses
• Support measurement frameworks, testing, and experimentation (e.g., campaign performance, re-engagement efforts, segmentation effectiveness)
• Translate data into clear, actionable insights and recommendations for stakeholders with varying levels of data fluency
• Ensure data quality, accuracy, and proper interpretation across first- and third-party data sources
• Contribute to the development of scalable analytics assets, documentation, and best practices to improve self-service analytics over time
• Collaborate on data management projects (e.g. data standardization projects, data mapping)

See all jobs on JobTailor