CTI Lead

The SGA Cyber Defense team is at the forefront of protecting S&P Global's critical assets through advanced threat intelligence and proactive security measures. We operate as a collaborative, high-performing unit that values technical excellence, continuous learning, and innovative approaches to emerging cyber threats. Our team culture emphasizes knowledge sharing, mentorship, and the pursuit of industry-leading security practices.

Responsibilities and Impact:

• Lead proactive threat research initiatives to identify emerging threats, attack patterns, and adversary tactics targeting the financial services sector and related industries.
• Develop and execute comprehensive collection strategies aligned to Priority Intelligence Requirements (PIRs), focusing on strategic and tactical intelligence that anticipates future threat landscapes.
• Conduct in-depth analysis of threat actor groups, their infrastructure, tools, and techniques to produce actionable intelligence that drives preventive security measures.
• Create and maintain threat profiles, campaign tracking, and adversary attribution analysis that informs strategic security planning and investment decisions.
• Collaborate with global security teams to translate research findings into practical defensive recommendations and threat hunting opportunities.
• Produce high-quality intelligence assessments, briefings, and reports for senior leadership, providing strategic context on the evolving threat environment and its business implications.

What We're Looking For:

Basic Required Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, International Relations, or equivalent work experience in cyber threat intelligence.
• Minimum 3+ years of experience in cyber threat intelligence with demonstrated focus on proactive research and analysis.
• Strong analytical and research skills with experience in open source intelligence (OSINT) collection and analysis methodologies.
• Proficiency with threat intelligence frameworks such as MITRE ATT&CK, Diamond Model, or Kill Chain analysis.
• Excellent written and verbal communication skills with ability to present complex technical findings to diverse audiences.
• Experience with threat intelligence tools and platforms for research, analysis, and reporting.

Additional Preferred Qualifications:

• Advanced degree in relevant field or professional certifications such as GCTI, SANS FOR578, or equivalent threat intelligence credentials.
• Experience with malware analysis, reverse engineering, or digital forensics techniques.
• Knowledge of geopolitical factors influencing cyber threat landscapes and state-sponsored threat actor activities.
• Familiarity with financial services regulatory requirements and industry-specific threat vectors.

Benefits:

• Health care coverage designed for the mind and body.
• Generous time off helps keep you energized for your time on.
• Access a wealth of resources to grow your career and learn valuable new skills.
• Secure your financial future through competitive pay, retirement planning, and financial wellness programs.
• Perks for partners and families, including best-in-class benefits.
• From retail discounts to referral incentive awards—small perks can make a big difference.

S&P Global is committed to fostering a connected and engaged workplace where all individuals have access to opportunities based on their skills, experience, and contributions. Our hiring practices emphasize fairness, transparency, and merit, ensuring that we attract and retain top talent.

S&P Global is an equal opportunity employer and all qualified candidates will receive consideration for employment without regard to race/ethnicity, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, marital status, military veteran status, unemployment status, or any other status protected by law.