> Markdown version of [/jobs/ext/1275529-cybersecurity-intelligence-analyst](https://www.wearedevelopers.com/jobs/ext/1275529-cybersecurity-intelligence-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity Intelligence Analyst - **Company:** MidFirst Bank - **Location:** Oklahoma City, OK, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Fraud Prevention and Detection, Microsoft Office, Open Source Technology, Open Source Intelligence, Phishing, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Cybercrime - **Published:** July 15, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/87727786/1 ## About the Role * Two or more years of experience in cybersecurity, threat intelligence, investigations, security operations or a closely related discipline * Working knowledge of common cyber threats, attack methods, phishing techniques, malware trends and threat actor behavior * Experience researching and analyzing cyber intelligence from open-source, commercial or internal sources * Ability to review and interpret security alerts, logs and investigative findings with sound judgment and attention to detail * Ability to evaluate information critically, identify meaningful patterns and distinguish relevant threats from background noise * Strong written and verbal communication skills with the ability to present findings clearly and professionally * Strong organizational skills and the ability to manage multiple priorities in a fast-paced environment * Ability to handle sensitive information with discretion and professionalism * Experience using Microsoft Office tools for documentation, reporting and communication * Ability to work effectively both independently and as part of a team, * Experience supporting cyber threat intelligence, fraud investigations, incident response or SOC-related activities in a banking or financial services environment * Familiarity with threat intelligence platforms, digital risk monitoring tools, SIEM platforms, case management systems or investigative tools * Experience with phishing analysis, domain and brand monitoring, dark web monitoring or external attack surface awareness * Experience supporting email investigations, eDiscovery requests, user activity reviews or related investigative workflows * Knowledge of MITRE ATT&CK, threat intelligence frameworks and intelligence lifecycle concepts * Understanding of indicators of compromise, indicators of attack and common investigative techniques * Familiarity with vulnerability intelligence and assessing the potential business impact of emerging threats * Experience producing executive summaries, operational alerts, case notes and technical intelligence reporting * Relevant certifications such as Security+, CySA+, GCTI, GCIA, GCIH, CISSP or similar industry credentials * Experience in a regulated environment with an understanding of confidentiality, risk management and control expectations *This position is on-site located in Oklahoma City, must reside within the area to be considered. *Position requires a minimum of 3 years of relevant US based experience. #LI-Onsite ## Description * Monitor external threat intelligence sources, digital risk platforms, open-source intelligence feeds and security alerts for threats relevant to MidFirst Bank * Identify, analyze and report on phishing campaigns, threat actor activity, brand impersonation, fraud-related indicators and other cyber threats * Research emerging cyber risks, vulnerabilities and attack techniques, and summarizing findings for technical and non-technical audiences * Support digital risk monitoring related to MidFirst-owned domains, brands, public-facing assets and other exposed identifiers * Review and correlate security events, alerts and available telemetry to help identify suspicious or malicious activity * Assist with triage, escalation and follow-up for security events in coordination with incident response, security operations and other Information Security functions * Support internal investigations involving email activity, user activity, suspicious communications, fraud indicators and related cyber events * Gather, analyze and document relevant findings from internal systems, intelligence sources and investigative tools * Produce timely, accurate and actionable intelligence reports, investigative summaries, briefings and alerts * Maintain awareness of threat trends affecting financial institutions and recommend practical risk-reduction measures * Support threat-hunting, process improvement and repeatable workflows related to intelligence, investigations and security monitoring * Participate in security reviews and related research efforts as needed to support the broader objectives of the Information Security team ## Related Videos - [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)