below marketmost similar roles pay hereabove market
This role pays more than
68%
of similar roles. Most pay
$106,628–$154,200
— the blue band above.
At the midpoint, this role pays about
$148k
versus about
$130k
for comparable roles.
Based on 240 similar postings.
Employer
About Fiserv
Fiserv is a global leader in financial services technology, providing core banking platforms, payment processing, digital banking, and merchant acquiring solutions to financial institutions and businesses. Industry: Financial Technology & Payments
Fiserv currently has
117 open roles
on FindRole.
Listed pay typically runs
$123,500–$193,800
across 85 roles with salary data.
The CTI Analyst joins the Cybersecurity Operations team to identify, track, and translate emerging cyber threats into actionable intelligence. This technical role involves operationalizing the intelligence cycle by developing collection plans, analytic frameworks, and threat assessments to protect platforms, data, and infrastructure. You will partner with SOC, Detection Engineering, Threat Hunting, and Red and Purple Teams to turn adversary behaviors into detections and hunt hypotheses. Key responsibilities include digging into adversary infrastructure like domains and IPs, and building tools and models to mature the CTI program. Required skills include expertise in the MITRE ATT&CK framework, cyber kill chain concepts, and TTP analysis. You will utilize Threat Intelligence Platform solutions like Anomali or OpenCTI, alongside providers like Recorded Future and CrowdStrike, to support security telemetry from network, endpoint, and cloud platforms.
Produce strategic, operational, and tactical intelligence reports, including threat assessments and executive briefings.
Track threat actors, campaigns, and attack patterns to set organizational operational priorities.
Partner with SOC and Detection Engineering teams to convert adversary behaviors into detection opportunities.
Collaborate with Threat Hunting teams to build hypotheses based on observed adversary trends.
Work with Attack Surface Management to prioritize vulnerabilities using real-time intelligence on exploitation trends.
Support Red and Purple Team exercises by profiling relevant threat actors for realistic testing.
Investigate adversary infrastructure, including domains, IPs, and hosting providers, to uncover operational relationships.
Develop and improve intelligence tools, models, processes, and platforms to mature the CTI program.
What we're looking for
5+ years of experience in operational or technical cyber threat intelligence or related cybersecurity disciplines like threat hunting or incident response.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field and/or equivalent military or federal experience.
Demonstrated ability to apply the intelligence lifecycle, MITRE ATT&CK, cyber kill chain concepts, and adversary TTP analysis to real-world investigations.
Demonstrated ability to conduct threat intelligence analysis, identify attack patterns, and communicate actionable intelligence to operational and executive stakeholders.
Experience using Threat Intelligence Platform (TIP) solutions such as Anomali or OpenCTI.
Experience using security telemetry from network, endpoint, cloud, identity, and/or email security platforms to support analysis and investigations.
Strong written communication skills to produce clear intelligence products and strong verbal briefing skills for presenting findings to stakeholders.