Cybersecurity Senior Threat Analyst (Hybrid)

Position Summary

Work Arrangement:

***This position is available as a hybrid position in our Sioux Falls, SD or Wilmington, DE office.***

At The Bancorp, we’ve spent more than 25 years driving innovation in the financial services industry. As one of the first banks to embrace fintech, we combine technology, expertise and a forward-looking approach to deliver creative, real-world solutions. We work side by side with our partners to help them grow and innovate with confidence. Across Fintech Solutions, Institutional Banking, Commercial Lending and Real Estate Bridge Lending, we provide the people, processes, technology and banking capabilities that turn bold ideas into outcomes. 

Join a team that brings urgency and rigor to every challenge and plays a direct role in driving growth for our clients and the communities we serve.

The Cybersecurity Senior Threat Analyst role is responsible for serving as a senior technical authority within Cybersecurity Technical Operations for threat detection, investigation, incident response, threat intelligence, vulnerability analysis, threat hunting, penetration testing, security assessments, and related cybersecurity operations.

The role independently performs complex technical work with minimal oversight and leads high-impact or ambiguous investigations and technical response activities. Establishes analytical standards, improves detection capabilities, performs advanced threat and vulnerability analysis, mentors Analyst I and Analyst II personnel, and leads significant operational initiatives.

The role independently performs assigned threat intelligence, penetration testing, and audit-support activities and provides technical findings and recommendations to management and other stakeholders. The position is a senior individual contributor and does not require direct personnel-management responsibility.

Key Responsibilities

• Serves as the senior technical escalation point for complex, high-impact, or ambiguous cybersecurity events and independently leads investigation, scoping, evidence analysis, containment, mitigation, eradication, recovery validation, and post-incident technical review.
• Performs advanced threat intelligence analysis with minimal oversight, correlating intelligence sources, campaigns, vulnerabilities, attacker behaviors, targeting information, and environmental exposure.
• Develops actionable intelligence to support detection, incident response, threat hunting, vulnerability prioritization, and management decision-making.
• Defines and leads proactive threat-hunting activities and establishes detection priorities.
• Develops, tests, tunes, validates, and reviews security-monitoring rules, queries, correlation logic, and use cases while identifying telemetry gaps and reducing false positives.
• Leads complex vulnerability analysis using exploitability, active threat intelligence, asset criticality, exposure, attack paths, business context, and existing controls.
• Performs validation, remediation review, retesting, and technical closure.
• Independently performs or leads assigned penetration tests, security assessments, and technical testing activities with minimal oversight, including test preparation, execution, analysis of findings, documentation, remediation guidance, and retesting.
• Provides senior technical support for internal and external audits, regulatory examinations, and control assessments by identifying required evidence, validating control operation, responding to complex technical requests, explaining security processes and findings, and supporting remediation of audit issues.
• Provides advanced technical support for cybersecurity platforms, integrations, queries, dashboards, scripts, automation, and analytical workflows and leads technical evaluations of security products and capabilities.
• Establishes and improves investigation, incident-response, threat-hunting, detection, vulnerability-analysis, and technical documentation standards.
• Develops and reviews procedures, playbooks, runbooks, and analytical guidance.
• Mentors Cybersecurity Threat Analyst I and II personnel, reviews complex analytical work, provides technical coaching, and helps develop team capabilities in investigation, detection, threat intelligence, vulnerability analysis, scripting, incident response, penetration testing, and related disciplines.
• Leads significant operational improvement initiatives and works with cybersecurity engineering, infrastructure, application, cloud, identity, data, audit, risk, and other teams to resolve complex security issues and improve controls.
• Develops advanced threat assessments, vulnerability reports, incident summaries, technical briefings, metrics, and recommendations and communicates significant findings to management and technical or nontechnical stakeholders.
• Uses approved AI-assisted capabilities for advanced analysis, threat research, detection development, vulnerability analysis, scripting, automation, and documentation.
• Evaluates generated conclusions for accuracy, provenance, unsupported assumptions, and potential security impact before use.
• Performs other duties as assigned.

Qualification Requirements

• Bachelor's degree in cybersecurity, information technology, computer science, or a related field, or an equivalent combination of education, training, and progressively responsible experience.
• Minimum of 5 years of cybersecurity, security operations, incident response, threat analysis, vulnerability management, penetration testing, system administration, networking, or related security experience.
• Demonstrated experience independently leading complex cybersecurity investigations or technical response activities.
• Advanced working knowledge of security monitoring, incident response, threat intelligence, vulnerability management, threat hunting, and common attacker techniques.
• Strong understanding of TCP/IP networking, DNS, web protocols, authentication, operating systems, cloud environments, and enterprise security technologies.
• Significant hands-on experience with technologies such as security information and event management (SIEM), endpoint and extended detection and response (EDR/XDR), security orchestration, automation, and response (SOAR), vulnerability management, threat intelligence, network security, email security, identity security, cloud-security platforms, or comparable technologies.
• Demonstrated ability to develop advanced security queries, detections, analytical content, scripts, or automation using technologies such as AQL, KQL, SPL, SQL, Python, PowerShell, APIs, or comparable tools.
• Demonstrated ability to evaluate incomplete or conflicting evidence and develop defensible technical conclusions.
• Ability to independently perform technical activities during high-pressure security events with minimal oversight.
• Demonstrated ability to mentor other cybersecurity personnel and communicate complex technical issues effectively.
• Working knowledge of AI and machine-learning capabilities and threats relevant to cybersecurity, including governance, privacy, reliability, security, and human-review considerations.
• Experience leading significant incident-response or forensic investigations preferred.
• Advanced experience in threat hunting and detection engineering preferred.
• Experience performing penetration tests, attack-path analysis, adversary emulation, or other security assessments preferred.
• Experience producing operational or tactical threat-intelligence analysis preferred.
• Experience supporting cybersecurity audits, regulatory examinations, or formal control assessments preferred.
• Experience correlating threat intelligence with detection, vulnerability management, and incident response preferred.
• Experience with cloud, identity, endpoint, network, application, and data-security technologies preferred.
• Experience developing cybersecurity automation and integrations using APIs preferred.
• Experience supporting cybersecurity programs within a regulated financial-services environment preferred.
• One or more advanced or role-relevant certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), Certified Ethical Hacker (CEH), or comparable credentials preferred.

What Success Looks Like

• Leads the team's most complex investigations and technical response activities with minimal oversight.
• Independently performs assigned threat-intelligence analysis, penetration testing, and audit-support activities and produces defensible findings and recommendations.
• Establishes analytical and operational standards that improve consistency across Analyst I and Analyst II personnel.
• Leads threat-hunting and detection-improvement efforts that measurably improve security coverage.
• Identifies systemic vulnerabilities, attack paths, and security-control weaknesses rather than treating findings individually.
• Produces technical work that withstands management, audit, regulatory, and technical scrutiny.
• Improves team capability through mentoring, technical review, procedures, standards, and knowledge transfer.
• Leads operational initiatives through implementation and measurable improvement.

Why This Role Matters

• This position is the team's senior technical escalation layer for complex events, advanced analysis, and technical response.
• It provides independent technical depth for threat intelligence, penetration testing, audit support, detection engineering, threat hunting, and vulnerability analysis.
• It develops the analyst bench and gives management technical leverage without creating a direct people-management requirement.

Additional Information

This job will be open and accepting applications for a minimum of five days from the date it was posted.

Working at The Bancorp Bank, N.A. and Benefits Information: https://thebancorp.com/company/join-our-team/

Company Culture & Background Screening

Company Culture at The Bancorp Bank: https://www.thebancorp.com/company/company-culture/

The Bancorp Bank, N.A. is an EQUAL OPPORTUNITY EMPLOYER and will not discriminate on the basis of race, color, religion, gender, gender identity, sexual orientation, pregnancy, citizenship, national origin, age, disability, genetic information, veteran status or other protected category with respect to recruitment, hiring, training, promotion, and other terms and conditions of employment.

Employment with The Bancorp Bank, N.A. includes successfully passing a background check including credit, criminal, education, employment, OFAC, and social media background history.

#LI-PJ1

#LI-Hybrid