Threat Intelligence Lead
About the Role
You will own and build a threat intelligence function. You will proactively hunt for and analyze emerging cyber and fraud tactics, techniques, and procedures, investigate tools and malware from the Dark Web and OSINT communities, and purchase and test attacker tooling. You will produce clear intelligence reports and alerts, implement and maintain tooling and automation to scale collection and analysis, and collaborate with engineering, data science, operations, and compliance to ensure intelligence directly informs detection models, product features, and internal security posture.
Requirements
- 8+ years of experience in Threat Intelligence Cyber Security or Cyberfraud
- Proven ability to identify and collect new fraud and cyber techniques technologies and systems
- Expertise in intelligence analysis methodologies such as Advanced OSINT Diamond Model Kill Chain and MITRE ATT&CK
- Deep understanding of the threat landscape and comfort operating on the Dark Web
- High proficiency with OSINT and commercial threat intelligence sources
- Experience in coding or scripting such as Python and SQL to automate data collection and analysis
- Excellent written and verbal communication skills for technical and non-technical audiences
Responsibilities
- Hunt for and analyze emerging cyber and fraud tactics techniques and procedures
- Identify and monitor external threat groups targeting Sardine and its merchants
- Investigate tools and malware used by fraudsters from the Dark Web and OSINT
- Own and manage the entire threat intelligence lifecycle
- Develop clear and timely intelligence reports briefings and alerts for internal audiences
- Evaluate implement and maintain threat intelligence platforms OSINT tools and automation
- Collaborate with Security Engineering Data Science Operations and Compliance to inform detection and product features
- Perform red team style testing using discovered attacker tooling to validate detections
Benefits
- Generous compensation in cash and equity
- Early exercise for all options including pre-vested
- Work from anywhere remote-first
- Flexible paid time off and year-end break
- Health dental and vision coverage for employees and dependents (US and Canada)
- 4% matching in 401k / RRSP (US and Canada)
- MacBook Pro provided
- One-time home office setup stipend
- Monthly meal stipend
- Monthly social meet-up stipend
- Annual health and wellness stipend
- Annual learning stipend