Threat Intelligence Lead, Ransomware Affiliates
Standard Chartered
Newark, NJ
Job Summary We are seeking a Lead, Ransomware Affiliates who has extensive knowledge in Intelligence Analysis, Data Querying and Analysis and General Cyber Security Awareness to join our Cyber Intelligence - Threat Management team in Newark. The successful candidate will be responsible for serving as a Threat Lead who will have ownership and accountability for the development of high impact intelligence related to defined geographic or thematic threat. The candidate should have a comprehensive understanding of cyber threat intelligence, intelligence processes, and technical investigative skills. They should also have experience in incident response, malware analysis, and risk management. As part of the Threat Lead role, you will be responsible for driving the strategy around intelligence collection, requirements, stakeholder engagement and identifying creative solutions for delivering impactful intelligence across the Group. We appreciate self-driven candidates who will be working closely with the wider Cyber Intelligence - Threat Management teams, creating and maintaining a list of business stakeholders (e.g. within the different lines of business) and engage regularly with those stakeholders to understand their business and threat landscape. We believe that a willingness to acquire new skills will contribute to success in this role. Key Responsibilities
- Threat lead for the Ransomware Affiliate Threat Area (RATA) which focuses on the individual threat actors (affiliates) that form part of the broader Ransomware-as-a-Service (RaaS) program, and is directly accountable for the development of high impact intelligence relating to the threat area.
- Produce high quality standardised intelligence reports to a full range of stakeholders, from technical peers to senior executives, providing detailed analysis on cyber events, including relevant economic and geopolitical variables.
- Provide decision-makers with a strategic view of the threat, predicting shifts in adversarial intent, goals and strategic objectives.
- Create and maintain detailed threat actor profiles on all relevant threat actors and groups within the threat area, mapping known TTPs to the MITRE ATT&CK framework.
- Profile and track threat actors (Ransomware Affiliates) in intelligence analysis platform – Synapse.
- Analyse patterns of adversary behaviours and develop hunting rules resulting in automated detection and curated threat data feed.
- Support various source (internal/external) analysis to understand and track adversaries targeting the bank.
- Act as a part of incident response team where appropriate and provide operational cyber intelligence support during ongoing incidents
- Establish, develop and own relationships with senior internal and external stakeholders, and provide in-person/video intelligence briefings where needed.
- Protect the bank by performing technical research into advanced, targeted attacks, malware campaigns, malware and other emerging technologies that post risk to the bank
- Actively contribute to driving forward the maturity of the team through continual process improvements, particularly intelligence analysis methodology and intelligence production.
- Although the role does not currently have direct people leader responsibilities, as a senior analyst and threat area lead, you will provide coaching and mentoring to junior analysts;
- This will include reviewing and editing intelligence products from other members of the team and providing appropriate feedback and suggestions.
- Maintain the highest standards of risk management, particularly regarding intelligence collection operations, data processing and confidentiality of information handling.
- 4+ years of cyber threat intelligence experience preferably in Banking and Financial services sector or law enforcement
- Bachelor’s degree in computer related major
- In-depth knowledge of the global cyber threat landscape, including threat actors, attack types, tactics, techniques and procedures.
- Familiarity with the cybercrime / ransomware ecosystem and its various intricacies.
- Strong experience and understanding of intelligence processes: analytical methods, the intelligence cycle, intelligence collection plans, source and information evaluation etc.
- Familiarity with structured analysis techniques for intrusion analysis e.g. Kill Chain, Diamond Model, MITRE ATT&CK.
- Experience in Threat Hunting with tools such as VirusTotal, pDNS, Certificate Transparency logs, Shodan
- Experience in intelligence sharing within communities such as FS-ISAC, NCFTA
- Strong technical investigative skills and expertise, such as an understanding of network protocols (particularly network layer, presentation layer and application layer).
- Strong threat research focus and investigative curiosity with the ability to be self-sufficient.
- Proficient in technical indicator pivoting and investigation (e.g. creating YARA rules to deploy in global malware repositories or developing Censys/Shodan queries for C2 hunting).
- Experience interrogating link analysis or data analysis tools (such as Synapse, IBM i2, Maltego, Palantir).
- Knowledge of scripting or coding languages such as Python or Storm (Synapse).
- A strong communicator both written and verbal with experience in writing and reviewing intelligence reports
- Experience with incident response and malware analysis
- Hands-on experience in audit engagement and risk management is added advantage
- Experience in using various open sources and tools to research external threat actors and threat actor group
- Worked in SOC analysis and investigation environment is preferred
- Appropriate certifications, such as GIAC GREM, GDAT, GCTI
- Do the right thing and are assertive, challenge one another, and live with integrity, while putting the client at the heart of what we do
- Never settle, continuously striving to improve and innovate, keeping things simple and learning from doing well, and not so well
- Are better together, we can be ourselves, be inclusive, see more good in others, and work collectively to build for the long term
- Core bank funding for retirement savings, medical and life insurance, with flexible and voluntary benefits available in some locations.
- Time-off including annual leave, parental/maternity (20 weeks), sabbatical (12 months maximum) and volunteering leave (3 days), along with minimum global standards for annual and public holiday, which is combined to 30 days minimum.
- Flexible working options based around home and office locations, with flexible working patterns.
- Proactive wellbeing support through Unmind, a market-leading digital wellbeing platform, development courses for resilience and other human skills, global Employee Assistance Programme, sick leave, mental health first-aiders and all sorts of self-help toolkits
- A continuous learning culture to support your growth, with opportunities to reskill and upskill and access to physical, virtual and digital learning.
- Being part of an inclusive and values driven organisation, one that embraces and celebrates our unique diversity, across our teams, business functions and geographies - everyone feels respected and can realise their full potential.
Posted 2025-11-29
Recommended Jobs
Sr. Administrative Director, AMC Division of GeneralGI Surgery & ColonRectal Surgery
Mass General Brigham
Somerville, NJ
Site: The General Hospital Corporation Mass General Brigham relies on a wide range of professionals including doctors nurses business people tech experts researchers and systems analysts to advanc…
View Details
Posted 2025-11-27
Pediatric Speech Pathologist (SLP) - Per Diem - East Brunswick, NJ
645 Route 18
East Brunswick, NJ
Job Title: Speech Pathologist Location: East Brunswick (EB) Department Name: Speech Pathology-OP Req #: 0000216563 Status: Hourly Shift: Evening Pay Range: $66.23 - $66.23 per hour …
View Details
Posted 2025-09-16
Authentication Training Lead
eBay
Moonachie, NJ
At eBay, we're more than a global ecommerce leader — we’re changing the way the world shops and sells. Our platform empowers millions of buyers and sellers in more than 190 markets around the world. …
View Details
Posted 2025-10-17
CNC Machinist - HIRING ASAP
Aerotek
Sussex County, NJ
**CNC Machinist - HIRING URGENTLY:** **Pay/Starting Wages** : + $28.00/hr-$38.00/hr + Shift Premium:$3.00-$4.00/hr **Openings/Hours:** + 1st shift (6:00am-2:00pm)or 4x10s + 2nd shift (2:00pm-10:00pm)o…
View Details
Posted 2025-11-22
Porter
Jetro / Restaurant Depot
Dayton, NJ
Job Description: Porter (Jetro/Restaurant Depot) Summary: The porter is responsible for ensuring all key areas in the warehouse are clean as well as being safe for all customers and employees. Th…
View Details
Posted 2025-11-07
Retail Sales Associate
POP MART Americas Inc.
Cherry Hill, NJ
POP MART, founded in 2010 (SEHK: 9992), is a market-leading entertainment company and a global champion of designer toy culture. Through global artist development, IP operations, designer toy culture…
View Details
Posted 2025-09-01
Purchase Based Rebate Analyst
Teva Pharmaceutical Industries Ltd.
Parsippany, NJ
Who we are Together, we’re on a mission to make good health more affordable and accessible, to help millions around the world enjoy healthier lives. It’s a mission that bonds our people across nea…
View Details
Posted 2025-11-14
Package & Delivery Driver's Helper
Cal Services
Edison, NJ
Join our dynamic and fast-paced team as a Package & Delivery Driver's Helper, where you play a crucial role in ensuring timely and accurate deliveries & pick-ups to our valued customers. As a Driver'…
View Details
Posted 2025-10-15
Cook
AristaCare Norwood Terrace
Plainfield, NJ
Cook AristaCare is seeking a Per-Diem Cook. In this role, you will prepare food and assure the quality of food is provided in accordance with state/federal guidelines. *Per-Diem: Hours vari…
View Details
Posted 2025-09-25
RN
One Hamilton Health Place
Hamilton, NJ
Job Title: RN Location: RWJ Hamilton Department: Operating Room Req#: 0000200799 Status: Full-Time Shift: Day Pay Range: $45.55 - $58.06 per hour Pay Transparency: The above re…
View Details
Posted 2025-08-10