Lead Threat Intelligence
Confirmed on the employer's own hiring board on Oct 26, 2026. First seen by Alion on Aug 6, 2026. NPCI scores B on the Alion truth index.
Responsibilities
Threat Intelligence Operations
Lead the development, execution, and continuous improvement of the Cyber Threat Intelligence program.
Monitor, analyze, and assess global cyber threats impacting the BFSI industry.
Produce strategic, operational, and tactical intelligence reports for technical and executive stakeholders.
Track emerging threat actors, cyber crime groups, nation-state actors, and financially motivated attackers.
Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary Tactics, Techniques, and Procedures (TTPs).
Leverage MITRE ATT&CK framework to map adversary behavior and identify detection gaps.
Analyze attack patterns targeting banking applications, digital payment platforms, online banking services, and financial transaction systems.
Support incident investigations by providing threat context, attribution analysis, and intelligence-driven insights.
Develop intelligence-led hunting hypotheses and prioritize threat-hunting activities based on business risk.
Collect intelligence from commercial, open-source, dark web, industry, and government intelligence feeds.
Evaluate source credibility and intelligence reliability using structured analytical techniques.
Track ransomware groups, phishing campaigns, financial malware, fraud operations, and supply chain threats relevant to BFSI organizations.
Monitor geopolitical developments and assess potential cyber impacts on financial services operations.
Collaborate with SOC and Detection Engineering teams to operationalize threat intelligence.
Develop and enhance detection use cases, SIEM analytics rules, watchlists, and threat indicators.
Create and maintain KQL queries, Sigma rules, and YARA signatures.
Improve detection coverage by aligning monitoring capabilities with emerging threat intelligence.
Present intelligence findings and cyber risk assessments to senior leadership and executive stakeholders.
Lead threat intelligence briefings and awareness sessions for technical and non-technical audiences.