Cyber Threat Management Analyst, Specialist

Global Risk and Security (GR&S) at Vanguard enables business strategy, protects client and Vanguard interests (e.g., assets and data), and stewards a strong risk culture. Our teams leverage enterprise-wide insights, deep expertise, and trusted advice so that across Vanguard leaders and crew drive faster, stronger, risk-informed decisions.

Within GR&S, the Enterprise Security and Fraud (ES&F) sub-division is responsible for the global protection of Vanguard crew, property, data, and client assets. We are the trusted advisors that protect the pride of Vanguard with state-of-the-art security and fraud capabilities. We are a world-class destination of highly engaged, passionate, and diverse talent expected to continuously learn and develop in an ever-changing security landscape.

Our crew are our greatest resource - by joining our team you will build collaborative long-term relationships and enjoy a suite of benefits that includes comprehensive health and wellness care, work-life balance, and an investment in your future at its core.

• Conduct tactical and operational threat analysis in support of ongoing campaigns, identifying new TTPs and vulnerabilities for analysis and detection opportunities. Drive operational needs as a senior officer inside of the team's tactical mission.
• Track threat actors, vulnerability exploitation, and other emerging and novel TTPs relevant to Vanguard's technology footprint. Prior career experience in intelligence surrounding threat actor tracking is highly desirable.
• Produce actionable reports, briefings, and indicators of compromise (IOCs) for internal stakeholders and review similar outputs from more junior members of the team as a subject matter expert.
• Possess critical thinking and problem-solving abilities to find solutions, extrapolate salient artifacts, and identify correlations in threat data.
• Escalate critical or important findings to managers in a timely manner with appropriate risk analysis.
• Exercise independent judgment in methods, techniques, and evaluation criteria for obtaining results.
• Work with hunt and analysis teams to assist with contextualizing the threat and facilitating the identification, mitigation, and containment of cyber-security incidents.
• Draft well-written analytical assessments and provide briefings to the team on key issues while guiding more junior analysts on how to build expertise in these areas.

• Knowledge of current and emerging cyber adversaries and their techniques, tactics, and procedures (TTPs)
• Knowledge of a Cyber Threat Intelligence Platform, feed integrations, and security/process orchestration and automation.
• Knowledge of threat modeling and adversary tactics and techniques frameworks, such as MITRE ATT&CK matrices, Cyber Kill Chain, ACH
• Knowledge of Common Vulnerability Scoring System (CVSS), CVE analysis, adversary exploitation techniques, attack surface management.
• Proficiency in cybersecurity tools and techniques, as well as knowledge of common cyber threats and attack vectors.
• Understanding of current cybersecurity trends, threats, and concepts.
• Ability to write succinct briefings, presentations, and reports to convey analysis, threat trends, threat actor profiles, indicator bulletins, vulnerability details and defensive strategies to varied audiences
• Bachelor's degree