Lead Threat Intelligence

Key Responsibilities

• Threat Intelligence Operations Lead the development, execution, and continuous improvement of the Cyber Threat Intelligence program.
• Monitor, analyze, and assess global cyber threats impacting the BFSI industry.
• Produce strategic, operational, and tactical intelligence reports for technical and executive stakeholders.
• Track emerging threat actors, cyber crime groups, nation-state actors, and financially motivated attackers.
• Identify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and adversary Tactics, Techniques, and Procedures (TTPs).
• Leverage MITRE ATT&CK framework to map adversary behavior and identify detection gaps.
• Analyze attack patterns targeting banking applications, digital payment platforms, online banking services, and financial transaction systems.
• Support incident investigations by providing threat context, attribution analysis, and intelligence-driven insights.
• Develop intelligence-led hunting hypotheses and prioritize threat-hunting activities based on business risk.
• Collect intelligence from commercial, open-source, dark web, industry, and government intelligence feeds.
• Evaluate source credibility and intelligence reliability using structured analytical techniques.
• Track ransomware groups, phishing campaigns, financial malware, fraud operations, and supply chain threats relevant to BFSI organizations.
• Monitor geopolitical developments and assess potential cyber impacts on financial services operations.
• Collaborate with SOC and Detection Engineering teams to operationalize threat intelligence.
• Develop and enhance detection use cases, SIEM analytics rules, watchlists, and threat indicators.
• Create and maintain KQL queries, Sigma rules, and YARA signatures.
• Improve detection coverage by aligning monitoring capabilities with emerging threat intelligence.
• Present intelligence findings and cyber risk assessments to senior leadership and executive stakeholders.
• Lead threat intelligence briefings and awareness sessions for technical and non-technical audiences.