Threat Intelligence Lead jobs in United States
cer-icon
Apply on Employer Site
company-logo

Canonical · 2 weeks ago

Threat Intelligence Lead

Canonical is a pioneering tech firm at the forefront of the global move to open source. The Threat Intelligence Lead will own Canonical’s threat intelligence strategy and execution, collaborating with internal stakeholders and the wider cybersecurity community to enhance the company's cybersecurity posture.

Computer Software
check
H1B Sponsor Likelynote

Responsibilities

Build and own Canonical’s threat intelligence strategy
Build and maintain OSINT research environments
Develop OSINT tradecraft, principals, and techniques
Identify and track targeted intrusion cyber threats, trends, and new developments by cyber threat actors through analysis of proprietary and open source datasets
Collaborate across teams to inform on activity of interest
Coordinate adversary/campaign tracking
Contribute to the wider threat intelligence community, establishing Canonical as a key contributor and thought leader in the space
Work with product and engineering teams to explain cybersecurity threats and advise on mitigation strategies
Work with the OPSEC and IS team to help implement/update security controls prioritising cyber defence
Identify intelligence gaps and propose new tools and research projects to fill them
Conduct briefings for executives, internal stakeholders and external customers

Qualification

Threat intelligence strategyOSINT toolsCyber threat analysisComputer networkingCybersecurity communicationAdversary trackingResearch project proposalExecutive briefingsOSINT community involvementTechnical content articulationDegree in computer scienceCertifications in securityExperience in tech companyTeam collaboration

Required

An experienced threat intelligence leader (or similar)
Knowledgeable about the current open source threat landscape and computer networking/infrastructure concepts
Highly competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools, etc.)
Able to identify, organise, catalogue, and track adversary tradecraft trends — often with incomplete data
Experienced using threat intelligence data to influence enterprise architecture or product development decisions
An excellent communicator with the ability to clearly articulate and tailor technical content to a variety of audiences
Able to travel twice a year, for company events up to two weeks long

Preferred

A professional portfolio of OSINT related scripts, tools, or frameworks
Demonstrated involvement in the larger OSINT community (please share relevant links)
Degree qualified, with a bachelor's degree in computer science, information security, or a related field
Certifications in related areas (e.g. GOSI, SANS SEC487 & SEC587, IntelTechniques OSIP, etc)
Experience in a tech company or government/military signal intelligence departments

Benefits

Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events

Company

Canonical

company-logo
We deliver open source to the world faster, more securely and more cost effectively than any other company.

H1B Sponsorship

Canonical has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (4)
2024 (1)
2023 (1)
2022 (3)
2021 (1)
2020 (1)

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Kara Stemig
Partner Marketing Manager, Public Cloud
linkedin

Recent News

Company data provided by crunchbase