Cybercrime Threat Hunting Manager

U.S. Bank

. Build and lead a new cybercrime threat-hunting and analytics capability .

Posted 10/5/2026full-timeUnited StatesMid-LevelSenior💰 $126,820 - $149,200 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber threat hunting, leading complex investigations, and developing strategic initiatives within cybersecurity and financial crime domains. Proficient in translating investigative findings into operational improvements and effectively communicating with senior leadership.

Highest-signal resume keywords

Cyber Threat HuntingPeople LeadershipInvestigative TechniquesFraud IntelligenceDetection Logic Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybercrime InvestigationsData AnalysisHypothesis DevelopmentThreat-Hunting MethodologiesIncident ResponseCredential Attack AnalysisAccount Takeover InvestigationMFA Abuse AnalysisSession HijackingFraud Detection

Soft Skills

Strong Communication SkillsTeam MentoringCross-Functional CollaborationStrategic Initiative LeadershipResults-Driven

Tools & Technologies

Graph AnalyticsLink AnalysisBehavioral AnalyticsAnomaly DetectionPayment Platforms

Certifications & Qualifications

Cybersecurity CertificationsFraud CertificationsFinancial Crime CertificationsIntelligence CertificationsData Analytics Certifications

Industry Keywords

Financial ServicesDigital BankingE-CommerceTelecommunicationsHigh-Volume Digital Environment

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Build and lead a new cybercrime threat-hunting and analytics capability
Establish the team’s strategy, roadmap, operating model, governance, priorities, and success measures
Hire, mentor, and develop a multidisciplinary team of cybercrime threat hunters
Personally lead high-priority, hypothesis-driven investigations involving cyber-enabled financial crime
Analyze activity across web, mobile, API, identity, authentication, device, voice, payment, account, and customer-interaction channels
Investigate account takeover, identity compromise, credential attacks, MFA abuse, session hijacking, bots, proxies, mule networks, linked accounts, and criminal infrastructure
Connect accounts, identities, devices, sessions, IP addresses, domains, phone numbers, email addresses, payment entities, and other attributes to identify coordinated activity
Translate investigative findings into detection logic, watchlists, dashboards, playbooks, control recommendations, and operational actions
Establish repeatable hunt methodologies, evidence standards, documentation requirements, intake processes, and operational handoffs
Partner with Fraud Strategy, Financial Crimes, Cyber Threat Intelligence, Incident Response, Identity and Access Management, Product, Digital Banking, Data Analytics, and other stakeholders
Communicate emerging threats, investigative findings, control gaps, and business impact to senior leaders
Measure team performance through financial-crime discovery, hunt execution, detection conversion, prevention, disruption, and operational quality

Requirements

What you’ll need

Five or more years of experience in cyber threat hunting, cybercrime, threat intelligence, fraud intelligence, security investigations, incident response, detection engineering, or a closely related discipline
Three or more years of direct people-leadership experience
Demonstrated experience personally leading complex cybercrime or cyber threat investigations
Experience developing investigative hypotheses and analyzing multiple systems, datasets, or telemetry sources
Strong understanding of cyber threat-hunting methodologies and investigative techniques
Knowledge of identity compromise, account takeover, credential attacks, authentication abuse, session threats, bots, proxies, phishing, or related criminal infrastructure
Ability to operate across cybersecurity, fraud, data analytics, and financial-crime functions
Experience translating investigative findings into measurable operational, detection, or control improvements
Strong written and verbal communication skills, including experience presenting technical findings and recommendations to senior leaders
Demonstrated ability to lead strategic initiatives, influence cross-functional stakeholders, and drive results in an evolving environment
This position is not eligible for visa sponsorship
Applicants must be able to comply with U.S. Bank policies and procedures including the Code of Ethics and Business Conduct and related workplace conduct and safety policies
Nice to have: experience building a new team, program, operating model, or investigative capability
Nice to have: experience in banking, financial services, payments, fintech, e-commerce, telecommunications, or another high-volume digital environment
Nice to have: experience with digital banking, online account opening, mobile applications, customer APIs, authentication systems, contact centers, IVR, or payment platforms
Nice to have: knowledge of fraud monetization, mule networks, linked-account analysis, synthetic identities, business email compromise, or organized criminal campaigns
Nice to have: experience with graph analytics, link analysis, entity resolution, behavioral analytics, anomaly detection, or relationship mapping
Nice to have: experience developing detection logic, correlation analytics, watchlists, dashboards, or investigative playbooks
Nice to have: familiarity with financial-sector intelligence sharing, industry consortiums, or law-enforcement partnerships
Nice to have: relevant professional certifications in cybersecurity, fraud, financial crime, intelligence, investigations, or data analytics

Benefits

Comp & perks

Healthcare (medical, dental, vision)
Basic term and optional term life insurance
Short-term and long-term disability
Pregnancy disability and parental leave
401(k) and employer-funded retirement plan
Paid vacation (from two to five weeks depending on salary grade and tenure)
Up to 11 paid holiday opportunities
Adoption assistance
Sick and Safe Leave accruals of one hour for every 30 worked, up to 80 hours per calendar year unless otherwise provided by law
Incentive and recognition programs
Equity stock purchase
401(k) contribution and pension