Senior Insider Threat Analyst

• Conduct sensitive insider threat investigations and comprehensive monitoring and analysis of insider threat indicators
• Develop insider threat use cases and detections using UEBA, UAM, SIEM, or similar technologies
• Preserve evidence, prepare detailed reports, and present findings to HR, Legal, and other stakeholders
• Design and execute proactive, hypothesis-driven threat hunts across endpoints, networks, and cloud environments
• Build proactive detections and alerts based on attacker TTPs, threat intelligence, and analytical insights
• Analyze logs from Windows, Linux, cloud environments, network devices, XDR, and SIEM platforms
• Evolve Insider Threat and Threat Hunt programs through best-practice advice, documentation, metrics, and process/tool improvements
• Apply MITRE ATT&CK and other frameworks to enhance detection and response
• Use Python, APIs, STIX/TAXII, and automation to improve intelligence gathering and processing
• Produce threat assessments, written reports, and briefings for technical and non-technical stakeholders
• Collaborate with CTM, Cyber Defense, security, technology, fraud, HR, and business-line partners
• Participate in technical incident response, tabletop exercises, and red/blue/purple team activities
• Provide mentorship and technical guidance to junior analysts and cross-functional partners
• Help strengthen Key Bank's overall threat posture and foster continuous learning

• Bachelor's degree in Computer Science, Cybersecurity, or related field, or equivalent experience
• 5+ years of experience in Insider Threat and/or Threat Hunting roles
• Strong analytical, research, and writing skills
• Proficiency with Insider Threat and Threat Hunting tools and log analysis
• Deep understanding of MITRE ATT&CK and adversary TTPs
• Strong ability to communicate concisely and effectively with executive management
• Ability to work independently and elevate risks appropriately
• Preferred certifications: GIAC Cyber Threat Intelligence (GCTI), GIAC Certified Forensic Analyst (GCFA), CISSP, CompTIA CySA+, or CompTIA Security+

Demonstrates expertise in conducting insider threat investigations and threat hunting, utilizing tools such as UEBA, UAM, and SIEM. Proficient in applying MITRE ATT&CK frameworks and producing detailed reports for diverse stakeholders.

• Insider Threat Investigation
• Threat Hunting
• MITRE ATT&CK Framework
• Log Analysis
• Python Programming

• Insider Threat Tools
• Threat Detection
• Data Analysis
• Evidence Preservation
• Report Writing
• Threat Intelligence
• Analytical Insights
• Automation
• Hypothesis-Driven Threat Hunts
• TTP Analysis

• Analytical Skills
• Communication Skills
• Mentorship
• Collaboration
• Independent Work

• GIAC Cyber Threat Intelligence (GCTI)
• GIAC Certified Forensic Analyst (GCFA)
• CISSP
• CompTIA CySA+
• CompTIA Security+

• Insider Threat
• Threat Hunting
• Cybersecurity
• Incident Response
• Threat Posture
• Continuous Learning
• Stakeholder Engagement
• Technical Guidance
• Red/Blue/Purple Team Activities
• Tabletop Exercises

• UEBA
• UAM
• SIEM
• XDR
• APIs
• STIX/TAXII
• Cloud Environments
• Network Devices
• Windows
• Linux