Lead Intelligence Analyst

at  UKG Ultimate Kronos Group

COMPANY OVERVIEW

Here at UKG, our purpose is people™. Our HR, payroll, and workforce management solutions help organizations unlock happier outcomes for all. And our U Krewers, who build those solutions and support our business, are talented, collaborative, and innovative problem-solvers. We strive to create a culture of belonging and an employee experience that empowers our people – both at work and at home. Our benefits show that we care about the whole you, from adoption and surrogacy assistance to tuition reimbursement and wellness programs. Our employee resource groups provide a welcoming place to land, learn, and connect with those who share your passions and interests. What are you waiting for?

DESCRIPTION & QUALIFICATIONS

Description
We are actively seeking a Lead All-Source Intelligence Analyst to join our Cyber Defense Fusion Center’s Intelligence Operations team. Our core mission revolves around empowering decision-makers with actionable intelligence to enhance both the technical and physical aspects of our operational landscape. As the ideal candidate, you will meticulously analyze and synthesize significant current events, threat actors, campaigns, and Tactics, Techniques, and Procedures (TTPs) within both the cyber and physical domains. Your role involves identifying patterns, assessing potential impacts on our organization, and providing refined threat intelligence.
Additionally, you will play a pivotal role in mobilizing cross-functional teams to address UKG’s strategic business imperatives. If you thrive on intellectual challenges, possess a keen eye for patterns, and are passionate about protecting our enterprise, we encourage you to apply. Let your critical thinking skills be the frontline of defense for our organization!

Qualifications

• Bachelor’s Degree (or the equivalent of four (4) years of professional experience); and
• Five to seven (5-7) years of relevant analytic experience in the Intelligence, Cybersecurity, Investigations, Law Enforcement, Data Forensics, or Information Security fields.
• Detailed knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the HCM and/or payroll payments/processing, software development, or financial services industries.
• Expertise with a range of threat intelligence tools and open-source intelligence resources/techniques
• Experience working across organizational boundaries to assess cyber threats to organizations infrastructure and services, with the ability to build relationships across the company and among external networks
• Experience leveraging Information sharing communities, professional consortia, or personal networks to fill intelligence gap

Preferred Qualifications:

• Knowledge of the Incident Response process and the MITRE ATT&CK framework
• Deep knowledge in at least one or more of the following threat categories: Regional Threat Groups, Emerging Technology (AI, ML, Quantum), Supply Chain Threats, Mobile Targeting Malware, and/or regulatory impacts to the threatscape.
• Familiarity with industry payment providers, to include TransferMate, Cambridge (Corpay), and Western Union

• Detailed analysis of current events, threat actors, IOCs, vulnerabilities, and TTPs.
• Synthesizing complex information to identify trends and patterns and assess impacts.
• Collecting and centralizing relevant intelligence sources.
• Developing and disseminating threat intelligence.
• Applying critical thinking and structured analytic techniques.
• Engaging and collaborating with internal security components and partners.
• Exceptional writing and briefing skills.

Qualifications

• Bachelor’s Degree (or the equivalent of four (4) years of professional experience); and
• Five to seven (5-7) years of relevant analytic experience in the Intelligence, Cybersecurity, Investigations, Law Enforcement, Data Forensics, or Information Security fields.
• Detailed knowledge of global cyber threats, threat actors and the tactics, techniques and procedures (TTPs) used by cyber adversaries, particularly as they relate to the HCM and/or payroll payments/processing, software development, or financial services industries.
• Expertise with a range of threat intelligence tools and open-source intelligence resources/techniques
• Experience working across organizational boundaries to assess cyber threats to organizations infrastructure and services, with the ability to build relationships across the company and among external networks
• Experience leveraging Information sharing communities, professional consortia, or personal networks to fill intelligence gaps

Preferred Qualifications:

• Knowledge of the Incident Response process and the MITRE ATT&CK framework
• Deep knowledge in at least one or more of the following threat categories: Regional Threat Groups, Emerging Technology (AI, ML, Quantum), Supply Chain Threats, Mobile Targeting Malware, and/or regulatory impacts to the threatscape.
• Familiarity with industry payment providers, to include TransferMate, Cambridge (Corpay), and Western Union.