CTI Analyst
Core
Identify, track, and translate emerging cyber threats into actionable intelligence to protect Fiserv's platforms, clients, data, and infrastructure.
Role type
Senior IC Cyber Threat Intelligence Analyst
Builds
Strategic, operational, and tactical intelligence products (threat assessments, campaign analyses, executive briefings, operational advisories) that inform stakeholder decisions and shape detection priorities.
Domain
Cybersecurity / Financial Services
Required skills
Intelligence lifecycle management, MITRE ATT&CK, adversary TTP analysis, threat intelligence analysis, correlation of technical indicators, infrastructure investigation (domains, IPs, certificates), Threat Intelligence Platform (TIP) usage, security telemetry analysis, written and verbal briefing
Preferred skills
Malware triage, behavioral analysis, Python/PowerShell/KQL/SPL automation, LLMs/agentic workflows, financial services experience, GCTI/GCIH/GCFA certifications
Technologies
Anomali, OpenCTI, Google Threat Intelligence, Recorded Future, Flashpoint, Silobreaker, CrowdStrike, passive DNS, WHOIS, certificate transparency, NetFlow
Responsibilities
Develop and maintain intelligence requirements and analytic frameworks; Produce threat assessments and operational advisories; Track threat actors and attack patterns; Partner with SOC and Detection Engineering to create detection opportunities; Support Threat Hunting with hypotheses based on adversary behaviors; Collaborate with Attack Surface Management to prioritize vulnerabilities; Support Red and Purple Team exercises with threat actor profiling; Investigate adversary infrastructure to uncover relationships; Build and improve CTI tools, models, and processes
Seniority
Senior, hands-on IC
