Threat Intelligence Lead

The Threat Intelligence Lead will own Canonical's threat intelligence strategy and execution. This role involves understanding which cyber threat actors are targeting Canonical and using intelligence on Tactics, Techniques, and Procedures (TTP) to strengthen products and internal cybersecurity controls. The successful candidate will collaborate with internal stakeholders and the wider cybersecurity community, establishing Canonical as a thought leader in open-source threat intelligence.

Key responsibilities include:

• Building and owning Canonical's threat intelligence strategy.
• Developing OSINT research environments and tradecraft.
• Identifying and tracking targeted intrusion cyber threats and trends.
• Collaborating across teams to inform on activity of interest.
• Contributing to the wider threat intelligence community.
• Advising product and engineering teams on cybersecurity threats and mitigation strategies.
• Conducting briefings for executives and internal stakeholders.

Qualifications:

• Experience as a threat intelligence leader or relevant role.
• Knowledgeable about the current open-source threat landscape.
• Competent with OSINT tools (e.g., Maltego, Shodan).
• Excellent communication skills for diverse audiences.
• Ability to travel twice a year for company events.

Desired Characteristics:

• A portfolio of OSINT-related scripts or tools.
• Involvement in the larger OSINT community.
• A bachelor's degree in computer science, information security, or a related field.
• Relevant certifications (e.g., GOSI, SANS SEC487).

Compensation and Benefits:

• Performance-driven annual bonus.
• Personal learning and development budget of USD 2,000 per year.
• Annual compensation review and recognition rewards.
• Remote work environment with biannual team sprints.
• Annual holiday leave, maternity and paternity leave, and employee assistance programs.
• Opportunities for travel to meet colleagues.

Language Requirements:
Fluency in English is expected.