Manager, Threat Intelligence

🕒 il y a 1 jour

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👔 Manager

👻 Score fantôme 11%

Ce que ça veut dire : la probabilité que cette offre reste ouverte sans recrutement actif.Comment le lire : 60 % ou plus, on pense que c'est une offre fantôme. Un score plus bas est moins inquiétant.Comment on la calcule : ancienneté, republications, postes ouverts vs taille de l'équipe, rapidité de clôture, et si le salaire est indiqué.À noter : une estimation à partir de données publiques, pas un jugement sur l'entreprise. De vraies offres peuvent avoir un score élevé, alors prenez-le comme un indice, pas comme un fait.

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

PDI Technologies

Site WebLinkedInTous les Emplois

501 - 1000 employés

📦 Logistique

💼 Conseil

📣 Marketing

Logistics • Consulting • Marketing

PDI Technologies est une entreprise spécialisée dans la fourniture de solutions technologiques et de données pour les industries centrées sur la commodité. Elle propose une gamme de services incluant la logistique, la cybersécurité, les points de vente, la planification des ressources d'entreprise, ainsi que des analyses et des insights, afin d'aider les entreprises à améliorer l'efficacité, sécuriser les données et renforcer l'engagement client. PDI Technologies connecte plus de 1 500 entreprises avec les outils nécessaires pour maximiser la productivité et obtenir des insights précieux sur les consommateurs, favorisant ainsi la croissance et la fidélité des clients dans les secteurs du commerce de détail de proximité, du pétrole en gros et des biens de consommation emballés.

Description

• Lead and grow a remote team of analysts, hunters, and detection engineers • Hire, coach, and develop team members with clear priorities and career paths • Split time between team leadership and hands-on threat hunting, intelligence writing, and detection development • Partner with SOC, Incident Response, and Security Engineering leaders to improve detection, response, and customer outcomes • Define intelligence requirements with SOC leadership and customers • Run the full intelligence lifecycle from collection through feedback • Deliver strategic, operational, and tactical intelligence products, including actor profiles, campaign analysis, industry threat briefs, and customer-specific reports • Track financially motivated groups, payment fraud operations, and ransomware crews targeting retail and hospitality • Own detection content strategy across SIEM and EDR/XDR • Develop, test, tune, and measure detection coverage against MITRE ATT&CK • Run hypothesis-driven threat hunts across customer environments • Use automation and AI for enrichment, triage support, and reporting • Provide intelligence context during major incidents and lead complex escalations • Advise customers through briefings, reports, and presentations for technical and executive audiences • Manage metrics including detection coverage, hunt findings, reporting timeliness, and customer satisfaction • Contribute to service planning and new offerings • Assess the team, tooling, and detection coverage during the first 90 days • Establish industry threat reporting and an ATT&CK coverage roadmap by six months • Deliver measurable detection coverage and hunt-driven improvements by 12 months

🎯 Exigences

• 8+ years in cybersecurity across threat intelligence, threat hunting, incident response, detection engineering, or security operations • 3+ years managing technical security teams, including hiring and developing people • Deep knowledge of adversary tactics and MITRE ATT&CK, the intelligence lifecycle, and the Diamond Model • Track record of producing finished intelligence for technical and executive audiences • Hands-on experience with SIEM platforms such as FortiSIEM, Microsoft Sentinel, Splunk, Google Chronicle, or ArcSight • Experience with EDR/XDR platforms and query languages such as KQL or SPL • Experience supporting complex investigations and incident response • Excellent written, verbal, and presentation communication skills • Ability to translate technical findings into business risk • A bachelor's degree in a related field or equivalent experience • Nice to have: MSSP or MDR provider experience • Nice to have: retail, hospitality, or payments experience, including POS systems or PCI DSS • Nice to have: detection-as-code, Sigma, SOAR, or scripting such as Python • Nice to have: threat intelligence platforms and feeds such as MISP or Recorded Future • Nice to have: cloud and SaaS investigations across Azure, AWS, or Microsoft 365 • Nice to have: involvement in intelligence-sharing communities such as RH-ISAC • Certifications such as GCTI, GCFA, GCIH, GREM, or CISSP are welcome but not required

🏖️ Avantages

• Competitive salary • Market-competitive benefits • Quarterly perks program • Ample time off [time away] • Hybrid working arrangements where appropriate • Continuous learning opportunities • Professional certifications • Leadership development opportunities • Supportive, diverse, and inclusive global culture