Manager, Threat Intelligence

Job not on LinkedIn

🔥 1 hour ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👔 Manager

👻 Ghost score 11%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

PDI Technologies

WebsiteLinkedInAll Job Openings

501 - 1000 employees

📦 Logistics

💼 Consulting

📣 Marketing

Logistics • Consulting • Marketing

PDI Technologies is a company that provides data-driven technology solutions to convenience-centric businesses. The company offers a range of services including logistics, consumer engagement, loyalty programs, cybersecurity solutions, and enterprise resource planning (ERP) and back office systems. PDI Technologies helps businesses in the convenience retail sector, petroleum wholesale industry, and consumer packaged goods market to optimize operations, increase profitability, secure data, and engage consumers. Their offerings also include insights and analytics to help businesses understand consumer behavior and market trends. With over 40 years of experience, PDI Technologies supports over 1,500 companies worldwide.

📋 Description

• Lead and grow a remote team of analysts, hunters, and detection engineers • Hire, coach, and develop team members with clear priorities and career paths • Split time between team leadership and hands-on threat hunting, intelligence writing, and detection development • Partner with SOC, Incident Response, and Security Engineering leaders to improve detection, response, and customer outcomes • Define intelligence requirements with SOC leadership and customers • Run the full intelligence lifecycle from collection through feedback • Deliver strategic, operational, and tactical intelligence products, including actor profiles, campaign analysis, industry threat briefs, and customer-specific reports • Track financially motivated groups, payment fraud operations, and ransomware crews targeting retail and hospitality • Own detection content strategy across SIEM and EDR/XDR • Develop, test, tune, and measure detection coverage against MITRE ATT&CK • Run hypothesis-driven threat hunts across customer environments • Use automation and AI for enrichment, triage support, and reporting • Provide intelligence context during major incidents and lead complex escalations • Advise customers through briefings, reports, and presentations for technical and executive audiences • Manage metrics including detection coverage, hunt findings, reporting timeliness, and customer satisfaction • Contribute to service planning and new offerings • Assess the team, tooling, and detection coverage during the first 90 days • Establish industry threat reporting and an ATT&CK coverage roadmap by six months • Deliver measurable detection coverage and hunt-driven improvements by 12 months

🎯 Requirements

• 8+ years in cybersecurity across threat intelligence, threat hunting, incident response, detection engineering, or security operations • 3+ years managing technical security teams, including hiring and developing people • Deep knowledge of adversary tactics and MITRE ATT&CK, the intelligence lifecycle, and the Diamond Model • Track record of producing finished intelligence for technical and executive audiences • Hands-on experience with SIEM platforms such as FortiSIEM, Microsoft Sentinel, Splunk, Google Chronicle, or ArcSight • Experience with EDR/XDR platforms and query languages such as KQL or SPL • Experience supporting complex investigations and incident response • Excellent written, verbal, and presentation communication skills • Ability to translate technical findings into business risk • A bachelor's degree in a related field or equivalent experience • Nice to have: MSSP or MDR provider experience • Nice to have: retail, hospitality, or payments experience, including POS systems or PCI DSS • Nice to have: detection-as-code, Sigma, SOAR, or scripting such as Python • Nice to have: threat intelligence platforms and feeds such as MISP or Recorded Future • Nice to have: cloud and SaaS investigations across Azure, AWS, or Microsoft 365 • Nice to have: involvement in intelligence-sharing communities such as RH-ISAC • Certifications such as GCTI, GCFA, GCIH, GREM, or CISSP are welcome but not required

🏖️ Benefits

• Competitive salary • Market-competitive benefits • Quarterly perks program • Ample time off [time away] • Hybrid working arrangements where appropriate • Continuous learning opportunities • Professional certifications • Leadership development opportunities • Supportive, diverse, and inclusive global culture