Cyber Threat Intelligence Analyst

Work Location State / Region / Province Arizona, Connecticut, Indiana, North Carolina, Rhode Island, Texas Country USA Domain Delivery Interest Group Company

ITL USA

Requisition ID

150817BR

Technical Skills 1 Technology|Infrastructure Security|SOC Operations Technical Skills 2 Technology|Security Operations|Threat Intelligence The Infosys Financial Services unit is a global leader in driving digital transformation for financial institutions. We specialize in leveraging advanced technologies such as AI, cloud, and data-led innovation to help our clients accelerate growth and unlock business value. Our AI-driven solutions empower financial institutions to make smarter decisions, enhance customer experiences, and achieve operational excellence. Join us to be part of a pioneering team that is at the forefront of financial services transformation. You'll have the opportunity to work with cutting-edge AI technologies, collaborate with industry experts, and contribute to transformative projects across banking, wealth management, and insurance sectors. If you're passionate about AI and eager to make a significant impact, the Infosys Financial Services unit is the perfect place for you to grow and excel. In the assigned Job Role of Infrastructure Consultant 2, your Area Of Responsibility will be as below: Collaborate with internal and client teams to resolve complex incidents, conduct root cause analyses, and document findings with preventive recommendations Participate in evaluation of client IT infrastructure, prepare actionable assessment reports, and support due diligence to document infrastructure maturity and improvement opportunities Contribute to the design of scalable, cost-effective IT infrastructure solutions, review reusable components, and develop technical documentation for deployed systems Align release schedules and environment readiness, execute deployments as per protocols, perform post-deployment testing, and manage version control to track changes Co-ordinate maintenance schedules, emergency fixes, and technology upgrades while ensuring uninterrupted integration into existing systems and processes Facilitate performance data analysis across systems, coordinate insights on system behavior, and support capacity planning to optimize performance Conduct security checks, recovery drills, and compliance audits, implement security measures, and coordinate continuity plans to maintain adherence to standards Gather feedback to identify automation opportunities, analyze existing infrastructure processes, and propose enhancements for efficiency gains Act as liaison with onsite, offshore, and vendor teams to document project requirements, ensuring effective collaboration Develop a centralized repository of technical and procedural knowledge, leveraging insights from other projects to drive efficiency and retain organizational expertise Your contribution to the team: A collaborative spirit and excellent communication skills. Ability to handle complex incidents and implement resolutions A knack for conducting IT infrastructure assessment and identifying key optimization opportunities Focused approach towards deployment management, system optimization, and process automation initiatives including sector specific focus The ability to work with cross-functional teams Required Skill and Experience Collect, process, and analyze threat intelligence from a broad range of sources including commercial threat intelligence platforms, ISAC/ISAO feeds, government advisories (CISA, FBI, etc.), dark web monitoring, and internal security telemetry. Assess the relevance, credibility, and severity of identified threats and translate findings into clear, concise intelligence products tailored to technical and non-technical audiences alike. Conduct design, creation, and ongoing management of threat-based alerting. The analyst will develop detection rules, correlation logic, and automated alerts within SIEM, SOAR, EDR, and threat intelligence platforms based on indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and adversary behavioral patterns mapped to the MITRE ATT&CK framework. The analyst will continuously tune existing alerts to reduce false positives, improve fidelity, and ensure detection coverage evolves with the threat landscape. Actively monitor alert queues and triage incoming threat notifications, determining disposition and escalation paths in coordination with the Security Operations Center (SOC) and Incident Response teams. During active security incidents: provide real-time intelligence support — enriching artifacts, profiling threat actors, and advising on adversary behavior and likely next steps. Maintain the organization's threat intelligence platform (TIP), ensuring indicators are ingested, tagged, enriched, and retired appropriately based on confidence and expiration. Support threat hunting initiatives by developing hypotheses grounded in current intelligence and collaborating with detection engineers to mature the organization's overall detection posture. Conduct regular deliverables include threat briefings, finished intelligence reports, IOC packages, and executive-level threat summaries. pParticipate in intelligence sharing with external partners and peer organizations through established trust groups and platforms. Preferred Skill and Experience Experience with SOAR platforms for automating alert triage and response workflows is highly desirable. Familiarity with dark web monitoring tools and techniques, and adversary infrastructure analysis. Prior experience in financial services, critical infrastructure, or other regulated industries is a plus. Relevant certifications such as SANS GIAC Cyber Threat Intelligence (GCTI), Recorded Future Certified Threat Intelligence Analyst, CompTIA CySA+, or equivalent credentials are viewed favorably Additional Required Qualifications Bachelor’s degree or foreign equivalent required from an accredited institution. Will also consider three years of progressive experience in the specialty in lieu of every year of education. This position may require relocation and/or travel to work/project location. Candidates authorized to work for any employer in the United States without employer-based visa sponsorship are welcome to apply. Infosys is unable to provide immigration sponsorship for this role now or in the future. Along with competitive pay, as a full-time Infosys employee you are also eligible for the following benefits: Long-term/Short-term Disability Health and Dependent Care Reimbursement Accounts Insurance (Accident, Critical Illness , Hospital Indemnity, Legal) 401(k) plan and contributions dependent on salary level About Us Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem. EEO Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability. #J-18808-Ljbffr Infosys Limited