Senior Cyber Threat Management Associate

Are you ready to make an impact at DTCC?  

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets.  We're committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact.  We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

Pay and Benefits:

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits 
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). 

The impact you will have in this role:

As a Threat Management Associate within DTCC's Global Threat Intelligence group, you will act as a cyber-incident response and physical security analytical Domain Expert  and apply your heightened experience to collect and synthesize intelligence to perform forensic log, host, network, and geo-political analysis. 
You will act as an intelligence analyst to process geo-political and cyber threats and incidents to disseminate intelligence reports and help coordinate response efforts to the DTCC enterprise.
 

Your Primary Responsibilities:

• Conduct research using open source, subscription, and security-related services to monitor and assess current and emerging threats
• Collect and exam all available forensic artifacts (e.g., source code, malware, and Trojans)
• Support the intelligence life cycle and priority intelligence requirements process by working directly with partners to successfully satisfy their intelligence needs and help mature and optimize workflows
• Prepare and produce written analytical reports identifying links, trends and metrics and deliver oral briefings to collaborators on key physical security, cyber threat, geo-political, and national security matters
• Coordinate with cyber intelligence and global security teams to correlate threat assessment information
• Provide tactical support to physical and cyber security investigations and operations to include performing real time cyber-incident handling (e.g., host and network based forensic collection, intrusion correlation and tracking, and cyber-threat analysis)
• Build and leverage relationships with internal/external peers from public and private sector organizations
• Align risk and control processes into day-to-day responsibilities to monitor and mitigate risk; calls out appropriately
• Monitor emerging vulnerabilities impacting resources used within the company
• Track attack vectors used by threat actors and evaluate the effectiveness of existing controls
• Support the Threat and Vulnerability Assessment process to ensure proper prioritization of remediation efforts
• Identify new threat TTPs and signatures used by cyber threat actors
• Review available intelligence feeds and generate IOC’s in support of our security monitoring tools
• Develop a working understanding of hacktivist threat capabilities and intentions
• Maintain up-to-date awareness of computer network exploitation and attack tools and tradecraft, threats and vulnerabilities, and respective countermeasures
• Aligns risk and control processes into day-to-day responsibilities to monitor and mitigate risk; raises appropriately

Qualifications:

• Minimum of 6 years of related experience
• Bachelor's degree preferred or equivalent experience

Talents Needed for Success:

• At least one of the following certifications: GCIH, GCFA, CEH, GSEC or comparable
• Familiarity with NIST, ISO, and other industry standard incident response frameworks
• Familiarity with the Intelligence Cycle and Cyber Threat Intelligence gathering and processing
• Technical understanding of the cyber threat landscape
• Demonstrated ability to research, collect, synthesize, and evaluate large amounts of quantitative and qualitative data and draw logical conclusions is required

The salary range is indicative for roles at the same level within DTCC across all US locations. Actual salary is determined based on the role, location, individual experience, skills, and other considerations. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.