Threat Intelligence Lead

About the Job:
The Threat Intelligence Lead will own Canonical's threat intelligence strategy and execution. This includes understanding which cyber threat actors are targeting Canonical and utilizing intelligence on Tactics, Techniques, and Procedures (TTP) to enhance our products and internal cybersecurity controls. You will collaborate with internal stakeholders and the wider cybersecurity community, ensuring that Canonical is recognized as a thought leader in open source threat intelligence. This role will report to the CISO.

Key Responsibilities Include:

• Building and maintaining Canonical's threat intelligence strategy.
• Developing OSINT tradecraft, principles, and techniques.
• Identifying and tracking targeted intrusion cyber threats.
• Collaborating across teams to inform on activity of interest.
• Contributing to the wider threat intelligence community.
• Advising product and engineering teams on security threats and mitigation strategies.
• Conducting briefings for executives, internal stakeholders, and external customers.

Requirements:

• Experienced threat intelligence leader (or similar).
• Knowledgeable about the current open source threat landscape and computer networking/infrastructure concepts.
• Competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, etc.).
• Ability to clearly communicate technical content to various audiences.
• Willingness to travel twice a year for company events (up to two weeks long).

Desired Characteristics:

• Professional portfolio of OSINT-related scripts, tools, or frameworks.
• Involvement in the larger OSINT community.
• Bachelor’s degree in computer science, information security, or a related field.
• Relevant certifications (e.g., GOSI, SANS SEC487 & SEC587, IntelTechniques OSIP, etc.).
• Experience in a tech company or government/military signal intelligence departments.

Benefits:

• Performance-driven annual bonus and compensation review.
• Personal learning and development budget of USD 2,000 per year.
• Annual holiday leave and parental leave.
• Employee Assistance Programme.
• Opportunity to travel for company events.

Canonical is a remote-first company, allowing global collaboration. We celebrate diversity and are committed to fostering a workplace that is free from discrimination.