Job Title: CTI
Job Location: Dallas, TX
Job Type: Contract
Job Description:
Manage internal and external sources of intelligence, review threat reports/feeds, and distill threat information into actionable cyber threat intelligence reporting
Write and provide cyber threat reports and briefings to executive, managerial, and front-line audiences, and respond to requests for information [RFIs] as needed
Maintain and develop priority intelligence requirements [PIRs] in conjunction with strategic stakeholders
Optimize threat models and MITRE ATT&CK mapping to ensure effective threat countermeasures are in place
Research and document TTPs and share related knowledge with other members of the team to assist with threat hunting, detection writing and incident response
Maintain awareness of cybercrime issues affecting financial institutions and related industries
Operationalize LLM-powered intel summarization at scale. Design pipelines that aggregate and normalize content from hundreds of OSINT sites, ISACs, vendor portals, blogs, and social sources; generate daily/weekly executive and analyst briefs with citations to original sources.
Use NLP/LLM models to extract and validate indicators, entities, and TTPs from raw reports; auto-tag with ATT&CK techniques to accelerate detection writing and threat hunting.
Orchestrate summarization and enrichment jobs with existing CTI tooling (ticketing/SOAR/SIEM); publish structured outputs (STIX/TAXII, JSON) for downstream detection and IR teams.
Partner with Security, Risk, and the AI Working Group to apply Firmwide AI usage policies, including human oversight, auditability, and data protection; operate only on approved GenAI platforms.