Threat Intelligence Lead

Accountabilities • Build, own, and continuously evolve the organization's threat intelligence strategy, priorities, processes, and operating model.

• Establish and maintain effective OSINT research environments, tradecraft, methodologies, tools, and techniques.

• Identify, monitor, and analyze targeted intrusion threats, emerging attack trends, adversary behavior, and developments across the open source software landscape.

• Analyze proprietary and open source datasets to identify relevant threat actors, campaigns, tactics, techniques, and procedures.

• Coordinate adversary and campaign tracking, maintaining structured intelligence on evolving threat activity even when information is incomplete or fragmented.

• Collaborate with security, product, engineering, and operations teams to communicate intelligence findings and translate them into practical defensive actions.

• Advise technical teams on cybersecurity threats, mitigation strategies, security architecture, and improvements to defensive controls.

• Identify intelligence gaps and propose new research initiatives, tools, datasets, and investigative projects to address them.

• Partner with security operations and information security teams to prioritize and implement controls based on intelligence-driven cyber defense requirements.

• Prepare and deliver threat intelligence briefings for executives, internal stakeholders, customers, and other audiences.

• Contribute to the broader threat intelligence and OSINT community through research, knowledge sharing, and thought leadership.

Requirements

• Proven experience as a threat intelligence leader or in a closely related cybersecurity intelligence role.

• Strong knowledge of the current open source threat landscape, cyber threat actors, attack trends, and common tactics, techniques, and procedures.

• Solid understanding of computer networking, infrastructure, software ecosystems, and cybersecurity concepts.

• Advanced proficiency with OSINT tools and investigative platforms such as Maltego, Shodan, OSINT Framework, Buscador, Trace Labs OSINT VM, and social media scraping technologies.

• Demonstrated ability to identify, organize, catalogue, correlate, and track adversary tradecraft from incomplete or diverse intelligence sources.

• Experience using threat intelligence to influence enterprise architecture, security controls, product development, or broader cybersecurity decisions.

• Excellent analytical and investigative skills, with strong curiosity and the ability to turn complex information into actionable intelligence.

• Exceptional written and verbal communication skills, with the ability to tailor technical and strategic information to executives, engineers, customers, and other stakeholders.

• Strong interpersonal skills, professional judgment, flexibility, accountability, and the ability to work effectively in a distributed international environment.

• A bachelor's degree in Computer Science, Information Security, or a related discipline is preferred, though equivalent professional experience may be considered.

• Experience working within a technology organization or government/military signals intelligence environment is advantageous.

• Relevant certifications such as GOSI, SANS SEC487, SANS SEC587, IntelTechniques OSIP, or equivalent are a plus.

• A professional portfolio containing OSINT scripts, investigative tools, frameworks, research, or other relevant work is highly desirable.

• Demonstrated participation in the wider OSINT or threat intelligence community is an advantage.

• Willingness and ability to travel internationally approximately twice per year for company events lasting up to two weeks.

Benefits

• Competitive compensation based on geographical location, experience, and performance.

• Performance-driven annual bonus.

• Annual compensation reviews.

• Personal learning and development budget of USD 2,000 per year.

• Distributed work environment with opportunities for in-person team sprints twice a year.

• Recognition and performance rewards.

• Annual holiday leave.

• Maternity and paternity leave.

• Employee Assistance Programme.

• Opportunities to travel to new locations and meet colleagues internationally.

• Priority Pass access and travel upgrades for eligible long-haul company events.

How Jobgether works: We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team. We appreciate your interest and wish you the best!  Why Apply Through Jobgether?    Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.     #LI-CL1