Cybersecurity Threat Intelligence Analyst

Cybersecurity Threat Intelligence Analyst

Full TimePerm

Shift:Hybrid - 3 days on location

Salary:$96600 - $144900 with 8% annual bonus

Location:Columbus OH Merrillville IN Lexington KY ChesterVACanonsburg PA or Washington DC

Relocation Assistance Provided

NiSource is one of the largest fully regulated utility companies in the U.S. serving millions of customers across six states.Weremore than an energy providerwerea team committed to innovation inclusion and growth. At NiSourceyoullfind a workplace that encourages collaboration supports professional development and empowers employees to make an impact.

The Cybersecurity department ensures the confidentiality integrity and availability of NiSource assets to achieve the company mission. We excel in engineering sophisticated defenses architecting resilient systems and proactively defending the vital cyber infrastructure that is crucial to our business operations.At NiSource the Cybersecurity Consultants provide the critical bridge between security theory and practice offering insights that shape our security strategies

TheCybersecurity and Physical Threat Intelligence Teamplays a pivotal role inidentifyingand analyzingcyberand physicalthreats emerging risks and industry developments.Our team partners closely withCybersecurityIncidentResponse Physical Security OperationsCyberRiskManagementandvarious other partners todetect and mitigatepotentialthreats tothe business across our digital and physical environments.As cyber and physical threats continue to converge our fusedintelligenceprogramdrivescohesion a proactive approachandstrengthensinformation-sharing practices across the Enterprise Security department.

As aCybersecurity Threat IntelligenceAnalystyou willcollect analyzeand interpret threat databuild strategic intelligence products based on documented trendsemploy frameworks such as NIST CSFandinform security protocolsbased on actionable intelligence.You will have the opportunity to support andfurther developinsider risk projects and insider threat investigations.You will work with a range of stakeholdersacross Enterprise Securityto deliver intelligence-led insights for incident responsethreathuntingand cyber defense activities. You willalso playa key rolein improving intelligence processes reportingand automation capabilities while building strong relationships across the organization and with external partners.

Your responsibilities may include but are not limited to:

• Monitor analyze track and report on evolving threat trends related to the company industry orcritical infrastructure andnational security more broadly

• Conduct advanced open-source intelligence (OSINT) research and investigationsintocyberthreat actorsoriginsmotivesTTPsemergingtrendsandgeopolitical developments. Assess how geopolitical and societal developments drive cyber activityover timeandimpacttheorganization

• Synthesizelarge volumes of multi-source intelligenceand technical processesinto concise products and executive-level briefingsto ensure that senior leadersget a clear understanding of threat activity related risksbusiness implications and recommended mitigations or controls

• Support tacticalintelligence collection and reporting includingmonitoring forindicators likeIOCsor malicious IPsleveragingtools fordetection and validation within NiSource systems and providing actionable intelligence to Incident Response

• Respond and support Cybersecurityor Physical Securityteams during high-impact incidents. Compileavailableintelligence intotimely high-confidence products

• Continue to update key stakeholders throughout a security or crisis eventto provide essential information translate technical information for a business audience and support overall business response and recoveryefforts

• Assistin developing new intelligence reporting thresholds templates products and data collection mechanisms

• Developandmaintainintelligence metricsdashboards investigative recordsand KPIs to ensure that team activities aremeasurable and aligned to businessobjectives

• Utilize intelligence tools and platforms such asDataminr Recorded FutureZeroFox and other OSINT capabilities to support routine monitoring investigationsand analysis

• Facilitate and develop new data connections for Power BI dashboards (database development) used for insider risk detection and tracking. Perform regular updates to API connections and dashboards as the Insider Risk and Threat programsevolve

• Collaborate closely with other teammembers and Cybersecurity verticals to conduct investigationsvalidatefindingssupport incident response effortsandenhance information sharingacross the physical and cyberdisciplines

• Participate periodically in procedural audits analytic reviews lessons-learned sessions or after-action reports

• Continuouslyrefine sourcing strategies andhelpevaluate technology needs within the changing AI and information security environment

• Contribute to updatingteammethodologiesandbuildonintelligence tradecraft through professional development opportunities

• Participate in collaborative benchmarking discussions with internal and external partners including government and law enforcement agencies

You mustpossessthe below minimum qualifications to be initially considered for this position. Preferred qualifications are in addition to theminimumrequirements and are considered a plus factor inidentifyingtop candidates.

Minimum Qualifications

• Bachelors degree or equivalent experience

• 4 years of experience inCyber Threat Intelligence Cyber Security Operations Incident Response Intelligence Analysis or relatedfieldsin the public or private sectors

• 4 years of experience applying the intelligence lifecycle MITRE ATT&CK framework cybercrime analysis threat actor tactics and techniques or cyber risk management principles

• 4 years of experience producingall-sourceintelligence reports briefings and assessments for both technical and senior business audiences

• 4 years of experience utilizing threat intelligence platforms and OSINT tools such asDataminr Recorded FutureZeroFox FlashpointCrowdStrikeorGoogle SecOps/CTI

• 2 years of experience in database and dashboard development ideally with the Azure Databricks Lakehouse platform and PowerBI

• ProficiencyinPython (PySpark)andSpark SQLfor large-scale data transformation

Preferred Qualifications

• Advanced degreeor industry certifications such asGCTI CTIA CISSP GIAC SANSor equivalent

• 5 yearsin a strategic Cyber Threat Intelligencerole with experience developing awide array of analytic intelligence productsfor senior leaders and iterating on intelligence processes methodologies and program KPIs

• Excellent writing verbal and interpersonal skills

• Ability to adapt to a fast-paced and innovative work environment

• Strong analytical problem-solving and communication skills with the ability to translate complex cyber issues into clear and actionable insights

• Experience with the utility or energy industry

• Experience with AI and ML technologies in Cybersecurity

Disclaimer

The preceding description is not designed to be a complete list of all duties and responsibilities requiredofthe position.

***Please notethere is a short open-ended questionnaire to completeregardingyour work experience towards the end of the application. This questionnaire can take up 10 - 15 minutes tocomplete.***

#Cybersecurity #CyberThreatIntel #ThreatIntelligence #ThreatHunting #IntelligenceAnalysis #ProtectiveIntelligence#WomenInTech #HybridJob#OhioMeansJobs #Columbus #Ohio #OH #NowHiring #BI #BusinessIntelligence #DataAnalysis #DataSci #DataAnalyst #PowerBI#Databricks #AzureDatabricks #SQL #Python#DataVisualization #Chicago