Director - Cyber Threat Intelligence (CTI)

Target • Brooklyn Park, NC

7d • Hybrid

About The Position

As a Director of Cyber Threat Intelligence (CTI), this role will lead a team of cyber threat analysts to drive strategic & technical analysis of key cyber threats. This role will lead in the identification and prioritization of information security threats, and advise Cyber Fusion Center partners on security/privacy risks & mitigations. The Director of CTI will also be tasked with collaborating with defensive control owners, threat research, and incident response to track and defend against emerging threat tactics, techniques, and procedures. This role will enable business and information security integration across the enterprise and be a key conduit for integration between Information Security and Risk teams and business and technology programs and initiatives. Additionally, the candidate stepping into this role will:
Maintain industry-wide expertise of the current cyber threat landscape and attack vectors
Advise technology and information security teams, including CISO and senior leaders on industry cyber threats, trends, technology, information security issues and legislation that impact the company's security posture and inform our information security policy.
Align initiatives with business objectives of the company and provide support to a variety of enterprise projects.
Lead and develop a team of tactical cyber-threat analysts, and drive the team through proactive engagement in company initiatives across the enterprise to support the security and privacy work streams for a variety of projects and initiatives.
Represent CTI area in planning, development, implementation and problem resolution within Technology Services.
Develop or guide lightweight engineering solutions that improve intelligence collection, enrichment, analysis, correlation, and dissemination.
Automate repetitive intelligence processes and enable analysts to focus on higher-value analytic activities.
Integrate internal security telemetry with external threat intelligence to improve contextualization and prioritization.
Partner with security engineering and platform teams to develop sustainable integrations between CTI platforms and technologies such as SIEM, SOAR, EDR, vulnerability management, asset management, and detection platforms.
Evaluate emerging technologies, including artificial intelligence and machine learning, that can improve intelligence collection, analysis, and analyst workflows.
Align with senior stakeholders at the VP and SVP levels regarding information security and compliance risks to the business pyramid.
Participate in annual planning process for technology and business activities.
Maintain an awareness of technological trends and use this knowledge to bring solutions to enhance the enterprise's competitive edge.
Core responsibilities of this job are described within this job description. Job duties may change at any time due to business needs.

Requirements

• 4-year degree and/or equivalent experience
• 7+ years of relevant experience
• Expert knowledge of the cyber threat landscape and the ability to communicate those threats to senior leadership
• Advanced technical understanding and extensive knowledge of tactics, techniques, and procedures associated with malicious cyber activity, organized crime, and both state and non-state sponsored threat actors
• Experience with establishing collection, analyzing, and actioning Threat Intelligence
• Ability to apply Cyber Threat Intelligence through enrichment, correlation, and attribution
• Strong experience with offensive security tactics, techniques, and procedures (DDoS, Malware, Phishing, Vulnerabilities, etc.)
• Technical experience with Threat Intelligence tools such as Passive DNS, Malware research / Virus Total Intelligence, URLScan, etc.
• Deep experience working with industry-wide frameworks and standards like MITRE ATT&CK
• Experience with threat intelligence vendors and platforms
• Proven ability to lead and grow a multifunctional cybersecurity organization
• Ability to lead down, across, and up in order to persuade and/or negotiate desired outcomes
• Strong verbal, written and presentation skills
• Broad and deep knowledge of business, technology/IT, cybersecurity technologies and approaches

Nice To Haves

• You are a coach and mentor with the ability to drive improvement and high potential development in others

Responsibilities

• Lead a team of cyber threat analysts to drive strategic & technical analysis of key cyber threats.
• Lead in the identification and prioritization of information security threats.
• Advise Cyber Fusion Center partners on security/privacy risks & mitigations.
• Collaborate with defensive control owners, threat research, and incident response to track and defend against emerging threat tactics, techniques, and procedures.
• Enable business and information security integration across the enterprise.
• Act as a key conduit for integration between Information Security and Risk teams and business and technology programs and initiatives.
• Maintain industry-wide expertise of the current cyber threat landscape and attack vectors.
• Advise technology and information security teams, including CISO and senior leaders on industry cyber threats, trends, technology, information security issues and legislation that impact the company's security posture and inform our information security policy.
• Align initiatives with business objectives of the company and provide support to a variety of enterprise projects.
• Lead and develop a team of tactical cyber-threat analysts.
• Drive the team through proactive engagement in company initiatives across the enterprise to support the security and privacy work streams for a variety of projects and initiatives.
• Represent CTI area in planning, development, implementation and problem resolution within Technology Services.
• Develop or guide lightweight engineering solutions that improve intelligence collection, enrichment, analysis, correlation, and dissemination.
• Automate repetitive intelligence processes and enable analysts to focus on higher-value analytic activities.
• Integrate internal security telemetry with external threat intelligence to improve contextualization and prioritization.
• Partner with security engineering and platform teams to develop sustainable integrations between CTI platforms and technologies such as SIEM, SOAR, EDR, vulnerability management, asset management, and detection platforms.
• Evaluate emerging technologies, including artificial intelligence and machine learning, that can improve intelligence collection, analysis, and analyst workflows.
• Align with senior stakeholders at the VP and SVP levels regarding information security and compliance risks to the business pyramid.
• Participate in annual planning process for technology and business activities.
• Maintain an awareness of technological trends and use this knowledge to bring solutions to enhance the enterprise's competitive edge.

Benefits

• Comprehensive health benefits and programs, which may include medical, vision, dental, life insurance and more
• 401(k)
• Employee discount
• Short term disability
• Long term disability
• Paid sick leave
• Paid national holidays
• Paid vacation

What This Job Offers

• Job Type: Full-time
• Career Level: Director
• Education Level: Associate degree