Threat Intelligence Lead

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Threat Intelligence Lead based in Brazil.

This role offers the opportunity to shape and lead a global threat intelligence program focused on emerging cyber threats and adversary activity.

You will investigate threat actors targeting software supply chains and the broader open source ecosystem, turning intelligence into actionable security improvements.

The position combines strategic leadership with hands-on OSINT research, adversary tracking, intelligence analysis, and security advisory work.

You will collaborate with security, product, engineering, and operations teams to identify intelligence gaps and strengthen defensive capabilities.

Your analysis will help influence product architecture, cybersecurity controls, and mitigation strategies across complex technology environments.

You will also engage with executives, customers, and the wider cybersecurity community, communicating technical findings in a clear and compelling way.

This is an ideal opportunity for an experienced intelligence professional who combines investigative curiosity with strong technical judgment and the ability to operate effectively in a globally distributed environment.

Accountabilities

• Build, own, and continuously evolve the organization's threat intelligence strategy, priorities, processes, and operating model.
• Establish and maintain effective OSINT research environments, tradecraft, methodologies, tools, and techniques.
• Identify, monitor, and analyze targeted intrusion threats, emerging attack trends, adversary behavior, and developments across the open source software landscape.
• Analyze proprietary and open source datasets to identify relevant threat actors, campaigns, tactics, techniques, and procedures.
• Coordinate adversary and campaign tracking, maintaining structured intelligence on evolving threat activity even when information is incomplete or fragmented.
• Collaborate with security, product, engineering, and operations teams to communicate intelligence findings and translate them into practical defensive actions.
• Advise technical teams on cybersecurity threats, mitigation strategies, security architecture, and improvements to defensive controls.
• Identify intelligence gaps and propose new research initiatives, tools, datasets, and investigative projects to address them.
• Partner with security operations and information security teams to prioritize and implement controls based on intelligence-driven cyber defense requirements.
• Prepare and deliver threat intelligence briefings for executives, internal stakeholders, customers, and other audiences.
• Contribute to the broader threat intelligence and OSINT community through research, knowledge sharing, and thought leadership.

Requirements

• Proven experience as a threat intelligence leader or in a closely related cybersecurity intelligence role.
• Strong knowledge of the current open source threat landscape, cyber threat actors, attack trends, and common tactics, techniques, and procedures.
• Solid understanding of computer networking, infrastructure, software ecosystems, and cybersecurity concepts.
• Advanced proficiency with OSINT tools and investigative platforms such as Maltego, Shodan, OSINT Framework, Buscador, Trace Labs OSINT VM, and social media scraping technologies.
• Demonstrated ability to identify, organize, catalogue, correlate, and track adversary tradecraft from incomplete or diverse intelligence sources.
• Experience using threat intelligence to influence enterprise architecture, security controls, product development, or broader cybersecurity decisions.
• Excellent analytical and investigative skills, with strong curiosity and the ability to turn complex information into actionable intelligence.
• Exceptional written and verbal communication skills, with the ability to tailor technical and strategic information to executives, engineers, customers, and other stakeholders.
• Strong interpersonal skills, professional judgment, flexibility, accountability, and the ability to work effectively in a distributed international environment.
• A bachelor's degree in Computer Science, Information Security, or a related discipline is preferred, though equivalent professional experience may be considered.
• Experience working within a technology organization or government/military signals intelligence environment is advantageous.
• Relevant certifications such as GOSI, SANS SEC487, SANS SEC587, IntelTechniques OSIP, or equivalent are a plus.
• A professional portfolio containing OSINT scripts, investigative tools, frameworks, research, or other relevant work is highly desirable.
• Demonstrated participation in the wider OSINT or threat intelligence community is an advantage.
• Willingness and ability to travel internationally approximately twice per year for company events lasting up to two weeks.

Benefits

• Competitive compensation based on geographical location, experience, and performance.
• Performance-driven annual bonus.
• Annual compensation reviews.
• Personal learning and development budget of USD 2,000 per year.
• Distributed work environment with opportunities for in-person team sprints twice a year.
• Recognition and performance rewards.
• Annual holiday leave.
• Maternity and paternity leave.
• Employee Assistance Programme.
• Opportunities to travel to new locations and meet colleagues internationally.
• Priority Pass access and travel upgrades for eligible long-haul company events.