Insider Threat and Threat Hunting Senior Analyst (Senior Information Security Consultant)

Insider Threat and Threat Hunting Senior Analyst (Senior Information Security Consultant) page is loaded## Insider Threat and Threat Hunting Senior Analyst (Senior Information Security Consultant)locations : Brooklyn, OH : Albany, NY : Amherst, NYtime type : Full timeposted on : Posted Todaytime left to apply : End Date : December 28, 2025 (8 days left to apply)job requisition id : R-36855

• Location :
• 4910 Tiedeman Road, Brooklyn OhioOur Cyber Threat Management team rolls up into Key’s broader Cyber Defense function within Corporate Information Security. Cyber Defense’s mission is simple : We aim to Deter, Detect, Deny, and Disrupt adversaries through proactive threat-centric defense.The Insider Threat and Threat Hunting Senior Analyst is a key member of the Cyber Threat Management (CTM) team and has responsibilities in both areas. In this role, you will focus on both technical insider threats and threat hunting. This role includes hands-on technical functions, along with helping both programs mature by evaluating the current state and recommending program and capability improvements.You will develop and maintain a deep understanding of the insider threat and cyber threat landscapes, by utilizing threat intelligence related to insider threats, along with threat actor Tactics, Techniques and Procedures (TTPs), and their associated threats, to support mitigation efforts while leveraging frameworks such as MITRE ATT&CK.This position requires strong threat hunting and insider threat investigation skills, and advanced knowledge of cybersecurity fundamentals and concepts. Success in this role demands an independent, thorough, and adaptable individual who can deliver accurate and complete intelligence outputs.
• Key Responsibilities
• Hands-on experience in designing and executing proactive, hypothesis-driven threat hunts across endpoints, networks, and cloud environments, leveraging threat intelligence and behavioral indicators to uncover hidden threats.
• Apply deep knowledge of attacker tactics, techniques, and procedures (TTPs) to build proactive detections and alerts for potential adversary activities, leveraging threat intelligence and analytical insights.
• Skilled in using security platforms such as Extended Detection and Response (XDR) and Security Information and Event Management (SIEM), along with the ability to analyze logs from diverse sources including Windows, Linux, cloud environments, and network devices.
• Hands-on experience in Insider Threat, including conducting sensitive investigations, use case development, detection development and Insider Threat platforms such as User and Entity Behavior Analytics (UEBA), User Activity Monitoring (UAM), or similar technologies.
• Conduct comprehensive monitoring and analysis of insider threat indicators. Preserve evidence, prepare detailed reports, and present findings to key stakeholders, including HR and Legal.
• Drive the evolution of the Insider Threat and Threat Hunt programs by advising on best practices, maintaining thorough documentation, enhancing metrics, and implementing improvements to increase organizational resilience.
• Good knowledge of the cyber threat landscape (preferably in the financial sector) and the ability to communicate those threats to senior leadership, technical and non-technical audiences.
• Apply frameworks (Ex. MITRE ATT&CK) to enhance detection and response.
• Skilled in automation, including intelligence gathering and processing using scripts or platforms (e.g., python, APIs, STIX / TAXII).
• Produce written reports, threat assessments, and briefings for technical and non-technical stakeholders.
• Collaborate closely within and outside of the CTM team.
• Participate, as needed, in technical incident response activities.
• Actively participate in tabletop exercises and red / blue / purple team activities.
• Interface with stakeholders within Cyber Defense, the broader security organization, and those outside of security such as technology, fraud, HR and other lines of business partners.
• Provide mentorship and technical guidance to junior analysts and cross-functional partners.
• Lead by example in fostering a culture of curiosity, rigor, and continuous learning within these functions.
• Demonstrated presentation development; tailors the message as needed; comfortable presenting to all levels; strong writing skills; demonstrates creativity in articulating messages that support recommendations.
• Performs other duties as assigned; duties, responsibilities and / or activities may change or new ones may be assigned at any time with or without notice
• Complies with all KeyBank policies and procedures, including without limitation, acting professionally at all times, conducting business ethically, avoiding conflicts of interest, and acting in the best interests of Key’s clients and Key.
• Required Qualifications
• Bachelor’s in Computer Science, Cybersecurity, or related field or equivalent experience
• Minimum 5 years of experience in Insider Threat or Threat Hunting roles.
• Minimum of 7 years of broadly based, progressive experience in information systems or information security environments.
• Strong analytical, research, and writing skills.
• Proficiency with Insider Threat and Threat Hunting tools, along with experience with log analysis.
• Deep understanding of the MITRE ATT&CK framework and adversary TTPs.
• Strong ability to communicate concisely, effectively and directly with executive management.
• Ability to work independently and escalate risks appropriately.
• Skills
• Working knowledge of the importance of inter-team collaboration in breaking down silos and achieving business results; ability to lead employees from various functions to communicate, coordinate work across divisions, and collaborate in solving problems as one team.
• Working knowledge of major functional processes and associated operating requirements; ability to apply this knowledge appropriately to diverse situations.
• Basic understanding of the importance of "big picture" thinking and planning; ability to apply organizational acumen and competitiveness to identify and maintain focus on key success factors for the organization.
• Extensive experience with techniques and tools that promote effective analysis; ability to determine the root cause of organizational problems and create alternative solutions that resolve these problems.
• Extensive experience with effective communication concepts, tools and techniques; ability to effectively transmit, receive, and accurately interpret ideas, information, and needs through the application of appropriate communication behaviors.
• Extensive experience with being proactive and committing to action on self-identified job responsibilities and challenges; ability to seek out work and the drive to accomplish goals.
• Working knowledge of tools, techniques, approaches and processes of cybersecurity risk management; ability to ensure organizational network operation and minimize negative effect by cybersecurity risks.
• Working knowledge of IT security policies, standards, and procedures; ability to utilize a variety of administrative skill sets and technical knowledge to ensure cyber security compliance.
• Working knowledge of methods and processes to monitor, analyze and respond to network attacks, intrusions or any unauthorized actions; ability to use techniques and tools to perform network defense.
• Working knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyze and prevent digital threats.
• Extensive experience with the processes, tools and techniques of information security management; ability to deploy and monitor information security systems, while detecting, controlling and preventing violations of IT security.
• Working knowledge of information security audits; ability to assess the effectiveness of information security measures, identify potential risk

#J-18808-Ljbffr