Insider Threat Intelligence Analyst

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.

Northern Trust is proud to provide innovative financial services and guidance to the world's most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Role/Department:

Northern Trust is seeking an experienced Insider Threat Intelligence / Counter-Intelligence Analyst to join our Security Operations team. In this role, you will lead our insider-threat intelligence operations to proactively collect intelligence on nation-state insider threat activities and drive operations to identify potential insider threat activities to Northern Trust. The ideal candidate will have a deep understanding of nation-state espionage and cyber espionage activities and will be responsible for leading insider threat investigations.

The key responsibilities of the role include:

• Identify Priority Intelligence Requirements (PIRs) for state-sponsored espionage and insider threat activities.
• Collect, analyze, and process intelligence reporting on state-sponsored intelligence operations targeting the US and Global Financial Sector.
• Lead development of the Insider Monitoring program.
• Collaborate across organizations, including with Insider Hunting, Cyber Threat Hunting, and Insider Risk teams.
• Engage with government partners and intelligence-sharing organizations.
• Support Insider Hunter and Threat hunting operations to identify potential Insider Threat techniques, tactics, and procedures (TTPs).
• Support Purple Team operations to emulate nation-state insider threat TTPs.
• Support Detection Engineering to tune security controls and detections for Insider Threat activity.
• Support technical investigations and collaborate with the Insider Hunter team to identify malicious/risky behaviors for escalation.

Skills/Qualifications

• Proven experience in cybersecurity and/or the US Intelligence Community, preferably in Foreign Intelligence Operations, Human Intelligence (HUMINT), Cyber Espionage, and Counter-intelligence operations.
• Initiate and carry out insider threat investigations end-to-end.
• Strong understanding of Nation-state Insider threat activities, their TTPs, plans, intentions, and motivations.
• Understanding of Nation-State Offensive Cyber Operations.
• Understanding of Supply-Chain risks, particularly vendors and technology attributed to nation-state intelligence activities.
• Ability to drive new and complex insider intelligence projects to completion.
• Effective communication and presentation of findings to stakeholders, including senior executives.

Working with Us:

As a Northern Trust partner, greater achievements await. You will be part of a flexible and collaborative work culture in an organization where financial strength and stability empower us to explore new ideas.

Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to community service. Join a workplace with a greater purpose.

We'd love to learn more about how your interests and experience could be a fit with one of the world's most admired and sustainable companies Build your career with us and apply today. #MadeForGreater

Reasonable accommodation

Northern Trust is committed to providing reasonable accommodations to individuals with disabilities. If you need an accommodation during any part of the employment process, please email our HR Service Center at MyHRHelp@ntrs.com.

We value an inclusive workplace and understand flexibility means different things to different people. Apply today and discuss your flexible working requirements with us to achieve greater success.