Cyber Threat Management Analyst, Specialist

Job Title Cyber Threat Intelligence Analyst

The Role The Cyber Threat Intelligence Center provides timely situational awareness, conducts deep analysis of threats and vulnerabilities, and extracts actionable information for relevant teams. Stakeholders include cyber-security response teams, internal lines of business, leadership, and external organizations such industry peers and intelligence sharing  this role you will Collect, analyze, and correlate cyber threat intelligence from open sources (OSINT), commercial, and government sources

Actively monitor the threat landscape to synthesize and disseminate critical insights to relevant stakeholders

Conduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs and vulnerabilities for analysis and detection opportunities

Assist leadership in tracking threat actors, vulnerability exploitation, and other emerging and novel TTPs relevant to Vanguard’s technology footprint

Produce actionable reports, briefings, and indicators of compromise (IOCs) for internal stakeholders

Possess critical thinking and problem-solving abilities to find solutions, extrapolate salient artifacts, and identify correlations in threat data Escalate critical or important findings to managers in a timely manner with appropriate risk analysis

Exercise independent judgment in methods, techniques, and evaluation criteria for obtaining results while also assessing the intelligence output of more junior analysts prior to dissemination

Work with hunt and analysis teams to assist with contextualizing the threat and facilitating the identification, mitigation, and containment of cyber-security incidents

Draft well-written analytical assessments and provide briefings to the team on key issues and provide editorial guidance to more junior analysts related to their output

What it takes

Experience working in a SOC or cyber operations environment

Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
Knowledge of a Cyber Threat Intelligence Platform, feed integrations, and security/process orchestration and automation  Knowledge of threat modelling and adversary tactics and techniques frameworks, such as MITRE ATT&CK matrices, Cyber Kill Chain, ACHKnowledge of Common Vulnerability Scoring System (CVSS), CVE analysis, adversary exploitation techniques, attack surface management

Proficiency in cybersecurity tools and techniques, as well as knowledge of common cyber threats and attack vectors.

Understanding of current cybersecurity trends, threats, and concepts

Ability to write succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences

Special Factors Vanguard is not offering visa sponsorship for this position

This is a hybrid position and would require you to work in the office 3 days per week (Tuesday, Wednesday & Thursday)
Please note that we review applications on a rolling basis and may close this role early if there is a high level of interest. To avoid missing out, we recommend applying as soon as possible

Why Vanguard?

Vanguard is a different kind of investment company. It was founded in the United States in 1975 on a simple but revolutionary idea: that an investment company should manage its funds solely in the interests of its clients. This is a philosophy that has helped millions of people around the world to achieve their goals with low-cost, uncomplicated investments. It's what we stand for: value to investors.

Inclusion Statement Vanguard’s continued commitment to diversity and inclusion is firmly rooted in our culture. Every decision we make to best serve our…