Especialista en Inteligencia de Amenazas

About the role

The Threat Intelligence Specialist is responsible for managing, developing, and operating threat intelligence capabilities to strengthen the organization’s cybersecurity posture. The role focuses on identifying, analyzing, and contextualizing threats relevant to the bank’s technology and operational environment, providing actionable information for detection, prevention, response, and containment.

Key responsibilities

• Identify and define threat intelligence requirements through threat modeling aligned with the bank’s environment.
• Collect, analyze, and contextualize threat data to enhance detection, prevention, and response capabilities.
• Produce intelligence that supports detection, response, and containment of targeted or persistent threats.
• Analyze financial sector trends and global threat landscapes to pinpoint attacker groups, tactics, techniques, and procedures.
• Develop and maintain threat actor profiles for defensive decision‑making.
• Conduct advanced persistent threat (APT) analysis and provide technical and strategic context to relevant teams.
• Create, manage, and share indicators of compromise in interchangeable formats.
• Maintain and enrich the threat intelligence platform ensuring relevance and actionability.
• Prepare strategic, tactical, and operational intelligence reports tailored to technical or managerial audiences.
• Provide intelligence inputs to support defensive, preventive, and risk‑mitigation decisions.
• Recommend mitigation actions in coordination with Service Owners and Incident Managers.
• Support incident response with threat context, including attack vectors and adversary behavior.
• Coordinate with sector CERTs, intelligence agencies, specialized communities, and external sources to exchange relevant threat information.

Required profile

• Bachelor’s degree in Computer Security, Computer Science, or a related field.
• Minimum 5 years of experience in cybersecurity with a focus on threat analysis.
• Relevant certifications such as GCTI, GCIA, CySA+ are desirable.
• Experience in malware analysis and reverse engineering.
• Proven experience working with Threat Intelligence Platforms (TIP) and threat feeds.

Required skills

• Threat modeling
• Malware analysis
• Reverse engineering
• Use of Threat Intelligence Platforms (TIP)
• Handling and processing threat intelligence feeds