Manager, Threat Intelligence

🕒 Outubro 1

🇺🇸 Estados Unidos – Remoto (EUA)

⏰ Tempo Integral

🟠 Sênior

🔴 Especialista

👔 Gerente

👻 Score fantasma 11%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 42 dias.
• As vagas desta empresa costumam ser preenchidas em 44 dias.
• Sem salário divulgado.

Candidatar-se

Encontrar Vagas Remotas Similares

PDI Technologies

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

📦 Logística

💼 Consultoria

📣 Marketing

Logistics • Consulting • Marketing

A PDI Technologies é uma empresa especializada em fornecer soluções de tecnologia e dados para indústrias voltadas para a conveniência. Eles oferecem uma gama de serviços, incluindo logística, cibersegurança, ponto de venda, planejamento de recursos empresariais e insights e análises para ajudar as empresas a melhorar a eficiência, proteger dados e aumentar o engajamento do cliente. A PDI Technologies conecta mais de 1. 500 empresas com as ferramentas necessárias para maximizar a produtividade e obter insights valiosos sobre os consumidores, promovendo o crescimento e a fidelidade dos clientes nos setores de varejo de conveniência, atacado de petróleo e bens de consumo embalados.

Descrição

• Lead and grow a remote team of analysts, hunters, and detection engineers • Hire, coach, and develop team members with clear priorities and career paths • Split time between team leadership and hands-on threat hunting, intelligence writing, and detection development • Partner with SOC, Incident Response, and Security Engineering leaders to improve detection, response, and customer outcomes • Define intelligence requirements with SOC leadership and customers • Run the full intelligence lifecycle from collection through feedback • Deliver strategic, operational, and tactical intelligence products, including actor profiles, campaign analysis, industry threat briefs, and customer-specific reports • Track financially motivated groups, payment fraud operations, and ransomware crews targeting retail and hospitality • Own detection content strategy across SIEM and EDR/XDR • Develop, test, tune, and measure detection coverage against MITRE ATT&CK • Run hypothesis-driven threat hunts across customer environments • Use automation and AI for enrichment, triage support, and reporting • Provide intelligence context during major incidents and lead complex escalations • Advise customers through briefings, reports, and presentations for technical and executive audiences • Manage metrics including detection coverage, hunt findings, reporting timeliness, and customer satisfaction • Contribute to service planning and new offerings • Assess the team, tooling, and detection coverage during the first 90 days • Establish industry threat reporting and an ATT&CK coverage roadmap by six months • Deliver measurable detection coverage and hunt-driven improvements by 12 months

🎯 Requisitos

• 8+ years in cybersecurity across threat intelligence, threat hunting, incident response, detection engineering, or security operations • 3+ years managing technical security teams, including hiring and developing people • Deep knowledge of adversary tactics and MITRE ATT&CK, the intelligence lifecycle, and the Diamond Model • Track record of producing finished intelligence for technical and executive audiences • Hands-on experience with SIEM platforms such as FortiSIEM, Microsoft Sentinel, Splunk, Google Chronicle, or ArcSight • Experience with EDR/XDR platforms and query languages such as KQL or SPL • Experience supporting complex investigations and incident response • Excellent written, verbal, and presentation communication skills • Ability to translate technical findings into business risk • A bachelor's degree in a related field or equivalent experience • Nice to have: MSSP or MDR provider experience • Nice to have: retail, hospitality, or payments experience, including POS systems or PCI DSS • Nice to have: detection-as-code, Sigma, SOAR, or scripting such as Python • Nice to have: threat intelligence platforms and feeds such as MISP or Recorded Future • Nice to have: cloud and SaaS investigations across Azure, AWS, or Microsoft 365 • Nice to have: involvement in intelligence-sharing communities such as RH-ISAC • Certifications such as GCTI, GCFA, GCIH, GREM, or CISSP are welcome but not required

🏖️ Benefícios

• Competitive salary • Market-competitive benefits • Quarterly perks program • Ample time off [time away] • Hybrid working arrangements where appropriate • Continuous learning opportunities • Professional certifications • Leadership development opportunities • Supportive, diverse, and inclusive global culture

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo