Own threat intelligence strategy and execution, identifying cyber threat actors targeting Canonical and software supply chains, using intelligence on attacker TTPs to improve products and internal security controls; reports to the CISO.
Build and own the threat intelligence strategy
Build and maintain OSINT research environments
Develop OSINT tradecraft, principles and techniques
Identify and track targeted intrusion threats, trends and new developments using proprietary and open source data
Collaborate across teams on activity of interest
Coordinate adversary and campaign tracking
Contribute to the wider threat intelligence community as a thought leader
Explain threats to product and engineering teams and advise on mitigations
Work with the OPSEC and IS team to implement or update security controls, prioritising cyber defence
Identify intelligence gaps and propose tools and research projects to fill them
Brief executives, internal stakeholders and external customers
Requirements
Experienced threat intelligence leader, or similar experience
Knowledge of the open source threat landscape and networking/infrastructure concepts
Highly competent with OSINT tools such as Maltego, Shodan and OSINT Framework
Able to identify, organise and track adversary tradecraft trends, often with incomplete data
Experience using threat intelligence to influence enterprise architecture or product decisions
Strong communicator who can tailor technical content to different audiences
Able to travel twice a year for company events lasting up to two weeks
Nice to have: professional portfolio of OSINT scripts, tools or frameworks
Nice to have: demonstrated involvement in the OSINT community
Nice to have: Bachelor's degree in computer science, information security or a related field
Nice to have: certifications such as GOSI, SANS SEC487 and SEC587, or IntelTechniques OSIP
Nice to have: experience at a tech company or in a government or military signals intelligence department
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
