Cybersecurity Intelligence Analyst

Monitor external threat intelligence sources, digital risk platforms, open-source intelligence feeds and security alerts for threats relevant to MidFirst Bank Identify, analyze and report on phishing campaigns, threat actor activity, brand impersonation, fraud-related indicators and other cyber threats Research emerging cyber risks, vulnerabilities and attack techniques, and summarizing findings for technical and non-technical audiences Support digital risk monitoring related to MidFirst-owned domains, brands, public-facing assets and other exposed identifiers Review and correlate security events, alerts and available telemetry to help identify suspicious or malicious activity Assist with triage, escalation and follow-up for security events in coordination with incident response, security operations and other Information Security functions Support internal investigations involving email activity, user activity, suspicious communications, fraud indicators and related cyber events Gather, analyze and document relevant findings from internal systems, intelligence sources and investigative tools Produce timely, accurate and actionable intelligence reports, investigative summaries, briefings and alerts Maintain awareness of threat trends affecting financial institutions and recommend practical risk-reduction measures Support threat-hunting, process improvement and repeatable workflows related to intelligence, investigations and security monitoring Participate in security reviews and related research efforts as needed to support the broader objectives of the Information Security team Position Requirements Two or more years of experience in cybersecurity, threat intelligence, investigations, security operations or a closely related discipline Working knowledge of common cyber threats, attack methods, phishing techniques, malware trends and threat actor behavior Experience researching and analyzing cyber intelligence from open-source, commercial or internal sources Ability to review and interpret security alerts, logs and investigative findings with sound judgment and attention to detail Ability to evaluate information critically, identify meaningful patterns and distinguish relevant threats from background noise Strong written and verbal communication skills with the ability to present findings clearly and professionally Strong organizational skills and the ability to manage multiple priorities in a fast-paced environment Ability to handle sensitive information with discretion and professionalism Experience using Microsoft Office tools for documentation, reporting and communication Ability to work effectively both independently and as part of a team Preferred Qualifications Experience supporting cyber threat intelligence, fraud investigations, incident response or SOC-related activities in a banking or financial services environment Familiarity with threat intelligence platforms, digital risk monitoring tools, SIEM platforms, case management systems or investigative tools Experience with phishing analysis, domain and brand monitoring, dark web monitoring or external attack surface awareness Experience supporting email investigations, eDiscovery requests, user activity reviews or related investigative workflows Knowledge of MITRE ATT&CK, threat intelligence frameworks and intelligence lifecycle concepts Understanding of indicators of compromise, indicators of attack and common investigative techniques Familiarity with vulnerability intelligence and assessing the potential business impact of emerging threats Experience producing executive summaries, operational alerts, case notes and technical intelligence reporting Relevant certifications such as Security+, CySA+, GCTI, GCIA, GCIH, CISSP or similar industry credentials Experience in a regulated environment with an understanding of confidentiality, risk management and control expectations

• This position is on-site located in Oklahoma City, must reside within the area to be considered.
• Position requires a minimum of 3 years of relevant US based experience.

#LI-Onsite

#LI-DNI

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor. #J-18808-Ljbffr MidFirst Business Credit, Inc.