Principal IS Threat Advisor (Perm -Hybrid at our Chicago HQ near O'Hare Airport)

In this role, you will provide analysis reporting, operational and tactical direction to diverse teams, such as information technology and various business units. Identify potential cyber threats, determine levels of risk, produce analytical reports for various audiences and lead cyber incidents response processes, including investigations and reporting. Present findings to senior executives both business and technology teams can understand. Understand risk, mitigation, and technical controls to be able to present content to different levels across the organization, vendors, and service providers and contribute to IT security strategy and roadmap.
Responsibilities

• Analyze cyber-attack information for attack methodologies.
• Advise and collaborate with security operation and information technology teams.
• Provide brand monitoring and protection through tools and third-party applications.
• Process, organize and analyze in the contextualization of incident indicators.
• Conduct verification and validation testing of the company networks and sensitive programs through internal team resources and independent consultant engagements.
• Investigate network and host detection and monitoring systems to advise engagement processes.
• Develop core threat intelligence capability and subject matter expertise.
• Lead cyber based investigations and tactical responses to security incidents by coordinating emergency actions to protect the business units from an imminent loss and forensic investigations.
• Build external relationship networks consisting of industry peers, subject matter experts, and security providers. Remain current with professional organizations and participate in national groups.
• Work with the fraud department as a force multiplier to their investigations.
• Pursue actionable intelligence on current threats.
• Translate actor TTPs into actionable data points to be prosecuted on internal data sets.
• Serve as a trusted advisor to technology leadership as required to successfully meet objectives

Education:

• Bachelors Degree - Computer Science, Business or Related - Minimum

Years of Experience:

• 10 Years - Information Security Monitoring and response or
  related - Minimum
• 4 Years - Tracking APT groups and other high-grade threats
  and active hunting of high-grade adversaries - Preferred

In Lieu of Education:

• 12 Years - Information Security Monitoring and response and tracking APT groups and other high-grade threats and active hunting of high-grade adversaries or related

License/Certifications/Training:

• Preferred: CISSP; CISM and/or SANS certification

Compensation & Benefits:
Typical hiring range:‏‏‎ ‎$148,800 - $215,800 Annually. Actual compensation will be determined using factors such as experience, skills & knowledge.
Additional Compensation: Annual performance bonus
‎Benefits: Alliant provides a benefits package including health care, vision, dental, and 401k with employer match.
Additional Benefits:

• Work from home up to 3 days a week
• Paid parental leave
• Employee discount programs
• Time off including paid personal and sick days
• 11 paid holidays
• Education reimbursement

*Note that eligibility and cost of benefits can vary depending on the number of regularly scheduled hours, and job status such as regular full-time, regular part-time, or temporary employment.
Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.
The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.