Threat Intelligence Lead

Responsibilities

• Build and own Canonical’s threat intelligence strategy
• Build and maintain OSINT research environments and develop tradecraft
• Identify and track targeted intrusion cyber threats and trends through analysis of proprietary and open source datasets
• Coordinate adversary and campaign tracking
• Collaborate with product and engineering teams to advise on mitigation strategies
• Work with OPSEC and IS teams to implement security controls
• Conduct briefings for executives, internal stakeholders, and external customers

Requirements

• Experienced threat intelligence leader
• Knowledge of the open source threat landscape and networking/infrastructure concepts
• High competence with OSINT tools (e.g., Maltego, Shodan, Trace Labs, OSINT Framework)
• Ability to identify and track adversary tradecraft trends with incomplete data
• Experience using threat intelligence to influence architecture or product decisions
• Excellent communication skills for technical and non-technical audiences
• Ability to travel twice a year for company events

Preferred Qualifications

• Professional portfolio of OSINT related scripts, tools, or frameworks
• Demonstrated involvement in the larger OSINT community
• Bachelor's degree in Computer Science, Information Security, or a related field
• Certifications such as GOSI, SANS SEC487, SEC587, or IntelTechniques OSIP
• Experience in a tech company or government/military signal intelligence departments

Benefits

• Distributed work environment with twice-yearly in-person team sprints
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review and performance-driven annual bonus
• Annual holiday, maternity, and paternity leave
• Employee Assistance Programme
• Travel upgrades for long-haul company events