{"id":3351665,"url":"https://alion.io/job/fis-cyber-threat-intelligence-siem-edr","title":"Cyber Threat Intelligence, SIEM, EDR","company":{"id":4808,"name":"FIS","domain":"fisglobal.com","url":"https://alion.io/company/fis","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":70,"ghost_share":0,"stale_share":0.586,"repost_share":0.057,"time_to_fill_p50_days":26,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":108000,"max_usd":206000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1385},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-27T18:46:06Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-30T22:35:52Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Job Description\nAbout FIS\nAre you curious, motivated, and forward-thinking? At FIS you’ll have the opportunity to work on some of the most challenging and relevant issues in financial services and technology. Our talented people empower us, and we believe in being part of a team that is open, collaborative, entrepreneurial, passionate and above all fun.\nAbout the team\nThe Cyber Threat Intelligence (CTI) team identifies, analyzes, and communicates cyber threats that could impact FIS, our clients, and the financial services industry.\nThe team monitors the global threat landscape, including threat actors, campaigns, emerging vulnerabilities, attack techniques, and industry-specific threats, and translates that information into actionable intelligence.\nCTI partners across security teams, including Security Operations, Incident Response, Vulnerability Management, and Attack Surface Management, to help drive threat hunting, detection, vulnerability prioritization, and proactive defensive measures.\nThe team uses intelligence requirements, internal security telemetry, commercial and open-source intelligence, and industry information sharing to provide timely, relevant intelligence to both technical teams and security leadership.\nWhat you will be doing\nYou will serve as a key subject matter expert and partner across the organization, helping translate the evolving threat landscape into intelligence that supports proactive risk identification, detection, vulnerability prioritization, and defensive decision-making. This includes:\nProvide technical and operational leadership for the CTI function, setting priorities, mentoring analysts, reviewing intelligence products, and promoting consistent, high-quality analysis across the team.\nDrive the continued maturity of the CTI program, including intelligence requirements, collection, analysis, tooling, workflows, reporting, dissemination, and integration with other security functions.\nLead research and analysis of threat actors, campaigns, emerging threats, vulnerabilities, and TTPs relevant to FIS and the financial services sector, using frameworks such as MITRE ATT&CK and structured analytic techniques.\nManage and optimize intelligence collection, including commercial platforms, open-source intelligence, information-sharing communities, and internal security telemetry, ensuring collection aligns with Priority Intelligence Requirements (PIRs) and stakeholder needs.\nProduce and review actionable intelligence for technical and executive audiences, clearly communicating threat relevance, potential impact, analytic confidence, and recommended actions to support informed security decision-making.\nPartner with SOC, Incident Response, Vulnerability Management, Attack Surface Management, and other security teams to translate intelligence into threat hunting, detection, vulnerability prioritization, investigations, and proactive defensive actions.\nWhat you bring\n7+ years of cybersecurity experience, including 4+ years of experience in Cyber Threat Intelligence or a closely related security intelligence discipline.\nPrevious experience leading or maturing a Cyber Threat Intelligence program or function.\nExcellent verbal and written communication skills, with the ability to communicate complex cyber threats clearly to both technical and executive audiences.\nStrong understanding of cyber threat actors, malware, attack techniques, vulnerability exploitation, and the broader cyber threat landscape.\nExperience using threat intelligence, SIEM, EDR, and other security platforms to investigate threats and support intelligence-driven security operations.\nExperience producing intelligence assessments and translating technical findings into actionable business and security recommendations.\nA bachelor's degree in computer science, cybersecurity, intelligence studies, or a related field, or equivalent professional experience.\nBonus if you have\nExperience working in financial services, payments, fintech, or another highly regulated industry.\nExperience with commercial threat intelligence platforms, intelligence-sharing communities, and security automation.\nRelevant certifications such as GCTI, GCIH, CISSP, CISM, or equivalent advanced cybersecurity/intelligence certifications.\nWhat we offer you\nAttractive benefits including private medical cover, dental cover, and travel insurance.\nA multifaceted job with a high degree of responsibility and a broad spectrum of opportunities.\nThe chance to work on some of the most challenging, relevant issues in financial services & technology.\nPrivacy Statement\nFIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.\nEEOC Statement\nFIS is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, genetic information, national origin, disability, veteran status, and other protected characteristics. The EEO is the Law poster is available here supplement document available here\nFor positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will be required to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.\nSourcing Model\nRecruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.","description_format":"text","description_chars":6170,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Security Operations","Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-10-27T18:46:06Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":26,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/fis-cyber-threat-intelligence-siem-edr","json_url":"https://alion.io/job/fis-cyber-threat-intelligence-siem-edr.json","meta":{"generated_at":"2026-10-31T00:25:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":665,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4808},"rest":"https://alion.io/mcp/rest/get_company?id=4808"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffis-cyber-threat-intelligence-siem-edr"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffis-cyber-threat-intelligence-siem-edr"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffis-cyber-threat-intelligence-siem-edr"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fis-cyber-threat-intelligence-siem-edr\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffis-cyber-threat-intelligence-siem-edr"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3351665}},{"tool":"search_jobs","arguments":{"company":"fisglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3351665},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}