Cyber Threat Intelligence US Lead

S&P Global

Confirmed live today High trust

Quick summary

Work type: On-site
Location: New York, NY
Posted: 5 days ago
Freshness: Confirmed live today
Closes: Oct 22, 2027
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $167k

$115k $214k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $135,750–$197,299.

Based on 240 similar postings.

Employer

About S&P Global

S&P Global delivers Essential Intelligence® that shapes decision making. We provide the world’s leading organizations with the right data, connected technologies and expertise they need to move ahead.

S&P Global currently has 39 open roles on FindRole.

Listed pay typically runs $145,245–$200,000 across 36 roles with salary data.

Most-posted roles

View all roles at S&P Global

At a glance

TL;DR · Cyber Threat Intelligence US Lead

Role Posting Log in to save

The Cyber Threat Intelligence US Lead joins the SGA Cyber Defense team to protect critical assets through proactive security measures. This role involves analyzing the external cyber threat landscape to inform defensive models and overseeing the collection and synthesis of threat intelligence and internal incident data. You will lead proactive research into emerging threats, attack patterns, and adversary tactics specifically targeting the financial services sector. Key responsibilities include developing collection strategies aligned to Priority Intelligence Requirements, creating threat profiles, and producing high-quality briefings for senior leadership. Required skills include proficiency with the MITRE ATT&CK framework, Diamond Model, and Kill Chain analysis, alongside experience in open source intelligence (OSINT) methodologies. You will utilize threat intelligence platforms to provide actionable research and practical defensive recommendations for global security teams.

Skills

Cyber Threat Intelligence OSINT MITRE ATT&CK Diamond Model Kill Chain Malware Analysis Reverse Engineering Digital Forensics Threat Hunting GCTI SANS FOR578

What you'll do

Analyze the external cyber threat landscape to inform the organization's defensive model.
Oversee the collection and synthesis of cyber threat intelligence and internal incident data.
Lead proactive research initiatives to identify emerging threats and adversary tactics in the financial services sector.
Develop and execute collection strategies aligned to Priority Intelligence Requirements (PIRs).
Conduct in-depth analysis of threat actor groups, infrastructure, tools, and techniques.
Create and maintain threat profiles, campaign tracking, and adversary attribution analysis.
Produce high-quality intelligence assessments and briefings for senior leadership.
Translate research findings into practical defensive recommendations and threat hunting opportunities.

What we're looking for

Bachelor's degree in Computer Science, Cybersecurity, International Relations, or equivalent work experience in cyber threat intelligence.
Minimum 3+ years of experience in cyber threat intelligence with a focus on proactive research and analysis.
Strong analytical and research skills with experience in open source intelligence (OSINT) collection and analysis methodologies.
Proficiency with threat intelligence frameworks such as MITRE ATT&CK, Diamond Model, or Kill Chain analysis.
Experience with threat intelligence tools and platforms for research, analysis, and reporting.
Excellent written and verbal communication skills to present complex technical findings to diverse audiences.
Advanced degree in a relevant field or professional certifications such as GCTI, SANS FOR578, or equivalent (preferred).
Experience with malware analysis, reverse engineering, digital forensics, or knowledge of geopolitical factors and financial regulations (preferred).

Similar roles

CSIS Intelligence Lead Analyst, Advanced Analytics and Cyber OSINT

Citi

Charlotte, NC +1 62 days ago $117,440–$176,160

OSINT Python PowerShell Bash MITRE ATT&CK Recorded Future Mandiant Advantage ThreatConnect MISP OpenCTI Palantir Maltego i2 Analyst's Notebook Link Analysis Malware Analysis Network Forensics Log Analysis Reverse Engineering

6+ yrs exp Hybrid

Save

Cyber Threat Intelligence Analyst

Booz Allen Hamilton

Huntsville, AL 24 days ago

Splunk Sentinel Python SQL C++ PHP Perl Java CrowdStrike Mandiant VirusTotal Shodan QRadar ArcSight Defender SIEM Digital Forensics Penetration Testing Network Protocols

3+ yrs exp

Save

Cyber Threat Intelligence Analyst

Booz Allen Hamilton

Huntsville, AL 47 days ago

Splunk Sentinel Python SQL PHP C++ Perl Java CrowdStrike Mandiant VirusTotal Shodan QRadar ArcSight Defender SIEM Digital Forensics Penetration Testing Network Protocols

5+ yrs exp

Save

Cyber Intel Analyst

Leidos

Washington, DC 42 days ago $87,100–$157,450

Threat Hunting Threat Intelligence Cyber Fusion MITRE ATT&CK SIEM EDR Python PowerShell Bash AWS Azure O365 Splunk KQL Elastic DSL DFIR Anomali ThreatConnect MISP TCP/IP DNS HTTP/S IDS/IPS Next-Gen Firewalls

4+ yrs exp Hybrid

Save

Lead Cyber Intelligence Analyst

McKesson Corporation

Irving, TX 20 days ago $151,600–$252,600

Cyber Threat Intelligence MITRE ATT&CK SIEM EDR NDR OSINT Virus Total Censys Grey Noise Domain Tools Scripting Automation AI Cyber Kill Chain

10+ yrs exp Hybrid

Save

Cyber Defense & Executive Engagement Lead

Salesforce

McLean, VA +1 13 days ago $172,500–$260,100

Cyber Threat Intelligence MITRE ATT&CK AWS Azure GCP Machine Learning Splunk ElasticSearch Jupyter Notebooks Reverse Engineering Malware Analysis SaaS Incident Response Security Engineering Platform Defense Threat Intelligence Platforms TTPs

8+ yrs exp Hybrid

Save