Principal Consultant, Threat Intelligence Advisory (Unit 42)

About the Role
The Principal Consultant, Threat Intelligence Advisory is a senior-level consulting position within the Unit 42 Proactive Services team. This role provides threat intelligence insights to clients through threat assessments, supporting cyber risk management engagements such as threat landscape assessments, intel-led red teaming, and tabletop exercises. The consultant will advise enterprise clients on enhancing their threat intelligence capabilities while demonstrating a hands-on mentality and the ability to work independently on complex engagements. Although there will be opportunities for research, most of the time will be spent in client engagements, making this role impactful and dynamic.

What You Will Do

• Collaborate with the Unit 42 Threat Intelligence Advisory team to deliver threat-informed services to international clients.
• Lead Threat Intelligence Advisory engagements, including threat assessments and intelligence maturity assessments.
• Provide intelligence support for risk management consulting engagements, including SOC, cloud, and AI security assessments.
• Utilize internal Unit 42 datasets, finished intelligence, and OSINT to identify relevant threats across various sectors and geographies.
• Work closely with client security teams to operationalize threat intelligence into measurable outcomes.
• Enhance Unit 42's presence and credibility in the marketplace through thought leadership initiatives, such as speaking engagements and blog articles.
• Optimize and streamline existing methods and processes using in-house AI platforms.

Qualifications
Required Qualifications

• Excellent English communication skills, both written and verbal, with the ability to tailor messages for various audiences, including technical analysts and executives.
• Demonstrable experience improving Cyber Threat Intelligence (CTI) processes and procedures for large enterprises, either as an internal member or consultant.
• Profound understanding of cybercriminal and state-sponsored groups, their tactics, techniques, and procedures (TTPs) along with high-level mitigations.
• Practical knowledge of intelligence tradecraft and adherence to Analytic Standards (ICD 203) in producing finished intelligence.
• Strong familiarity with the MITRE ATT&CK framework.
• Proven ability to engage with business and security stakeholders, grasping their requirements and decision-making processes.
• Willingness to travel up to 30% of the time.

Preferred Qualifications
While not all are required, some combination of the following is desirable:

• Experience in intelligence-led red team exercises (e.g., CBEST, TIBER, iCAST, Corie).
• Knowledge of threat actor hunting tools and techniques.
• Background in incident response, digital forensics, or security operations.
• Experience in risk management consulting, advising clients on security controls.
• Additional language skills (e.g., Arabic, Spanish) for client interactions.
• Curiosity or experience with AI agentic workflows in threat intelligence.
• Cybersecurity industry certifications, such as CRTIA, CCTIM, or GCTI, are a plus but not essential.
• A proven track record of authoring threat intelligence reports and presenting at cybersecurity conferences.

Our Commitment
We are committed to being trailblazers in cybersecurity, fostering innovation through diverse teams. We welcome applicants from all backgrounds and celebrate diversity in the workplace.
We also provide reasonable accommodations for qualified individuals with disabilities. If assistance is needed, please contact us at accommodations@the company.

We support immigration sponsorship.