Cyber Intelligence & Incident Manager

Commerzbank AG

Experience: 3+ yrs
Location: New York, New York, United States
Job type: Full-time

Required skills

Splunk
Threat Intelligence Platform
Python
PowerShell
Bash

About the role

Functional Title:	Cyber Intelligence & Incident Manager
Corporate Title:	AVP
Overtime Eligible (Y/N)	N
Department:	GS-TF - Group Technology Foundations
Reports To: (Position)	Chapter Lead
Incumbent Name:
Management Responsibilities: (Y/N)	N
Position Summary:
The purpose of this role is to perform specialist Threat Intelligence activities and support technical analysis, incident response and incident management efforts. This position is responsible for the end-to-end lifecycle of threat intelligence, from collection and analysis to dissemination and providing actionable recommendations to mitigate developing threats. This role also ensures timely communication of developing threats to stakeholders and management by producing strategic and tactical threat assessments to support mitigation activities.
Essential Duties and Responsibilities:
l Intelligence & Analysis: l Monitor, analyse, and report on the global cyber threat landscape, with a specific focus on threats targeting the financial services sector (e.g., banking trojans, ransomware groups, APTs). l Produce high-quality, finished intelligence products (strategic, operational, and tactical) for diverse audiences, ranging from technical SOC analysts to C-level executives. l Maintain and update detailed threat actor profiles, tracking shifts in intent, capabilities, and strategic objectives. l Incident Response Support Responsibilities: l Serve as an escalation point for security operations during complex incidents l Provide intelligence-based guidance and high-fidelity threat context during an incident. l Collaboration & Communication l Collaborate with analysts and subject matter experts to leverage their knowledge and expertise. l Strengthen internal threat visibility by fusing intelligence inputs across multiple functions in Commerzbank. l Maintain & establish relationship with wider threat intelligence community, information sharing partners etc. l Miscellaneous responsibilities as required
Experience /Qualifications/Education:
l Bachelor’s degree or higher in Information Security, Computer Science, Computer Engineering, or a related field. l A minimum of 3-5 years of experience in Cyber Threat Intelligence, Incident Response, or a related field, preferably the financial sector. l Deep understanding of the intelligence cycle (Direction, Collection, Processing, Analysis, Dissemination, Feedback). l Strong knowledge of the MITRE ATT&CK framework and the Diamond Model of Intrusion Analysis. l Hands-on experience with SIEM tools (e.g., Splunk) and Threat Intelligence Platforms (TIP). l Proficiency in scripting languages (Python, PowerShell, Bash) to automate data collection and analysis tasks. l The following certifications are desired: CISSP, GCTI.
Disclaimer: The above statements are intended to describe the general nature and level of work being performed by people assigned to this position. This document is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities required by the incumbents. Job responsibilities are subject to change, with or without notice. All employees may be required to perform duties outside of their normal responsibilities at any time at the Firm’s total discretion. This document does not constitute a contract of employment with you of any kind, express or implied for any duration, or with respect to any of its stated or omitted terms. As described in the Firm’s employee handbook, the Firm reserves the right to terminate your employment with or without cause, notice or reason at any time at its sole discretion.

About Commerzbank AG

Provides retail and commercial banking services to individuals and businesses.

This page is fully interactive when JavaScript is enabled. Please enable JavaScript to apply or browse related roles.