Principal Cyber Threat Intelligence Specialist

University of Miami•Miami, FL

2d•Onsite

About The Position

The University of Miami Information Technology & Systems Department has an exciting opportunity for a full-time Principal Cyber Threat Intelligence Specialist. The Principal Cyber Threat Intelligence Specialist serves as the University's senior subject matter expert for enterprise threat intelligence, artificial intelligence (AI)-enabled cybersecurity operations, and security automation. This role leads the development and execution of intelligence-driven cyber defense strategies that enhance threat detection, incident response, vulnerability management, and operational efficiency across the University of Miami and UHealth. The incumbent provides enterprise-wide technical leadership and strategic guidance without direct supervisory responsibility and collaborates with technology, security, clinical, research, and institutional stakeholders to advance cybersecurity capabilities across academic, research, healthcare, and administrative environments.

Requirements

Bachelor’s degree in relevant field required
Minimum 10 years of relevant experience required
Learning Agility: Ability to learn new procedures, technologies, and protocols, and adapt to changing priorities and work demands.
Teamwork: Ability to work collaboratively with others and contribute to a team environment.
Technical Proficiency: Skilled in using office software, technology, and relevant computer applications.
Communication: Strong and clear written and verbal communication skills for interacting with colleagues and stakeholders.
Any appropriate combination of relevant education, experience and/or certifications may be considered.

Responsibilities

Leads the University's enterprise threat intelligence program supporting academic, healthcare, research, and administrative environments.
Monitors, analyzes, and operationalizes intelligence from internal, external, commercial, government, and industry threat sources to identify emerging cyber threats and risks.
Develops intelligence-driven threat detection strategies, threat hunting methodologies, and proactive cyber defense capabilities.
Translates threat intelligence into actionable recommendations, detection content, response procedures, and risk mitigation strategies.
Leads advanced cyber threat analysis activities during significant security incidents, investigations, and cybersecurity events.
Serves as the University's principal subject matter expert for AI-enabled cybersecurity operations, security automation, and intelligence-driven security practices.
Designs, implements, and optimizes AI-powered workflows, prompts, playbooks, knowledge repositories, and automation solutions that enhance Security Operations Center (SOC) effectiveness and operational efficiency.
Develops, deploys, and manages AI-powered agents and automated processes that support security monitoring, investigations, incident response, and operational decision-making.
Establishes standards, governance practices, and security controls for the responsible and secure use of artificial intelligence technologies within cybersecurity operations.
Develops and enhances enterprise security monitoring, analytics, reporting, and orchestration capabilities that improve threat detection, vulnerability prioritization, and cyber risk visibility.
Analyzes and correlates threat, vulnerability, and operational security data using intelligence-driven and AI-assisted methodologies to identify emerging risks and critical exposures.
Designs and implements dashboards, reporting solutions, automated workflows, runbooks, and operational playbooks that support remediation prioritization, risk reduction, and leadership decision-making.
Leads cybersecurity innovation initiatives focused on threat intelligence, artificial intelligence, automation, and operational modernization while researching emerging technologies, threats, and industry trends.
Serves as a trusted technical advisor and collaborates with cybersecurity, infrastructure, clinical technology, research computing, identity and access management, governance, risk and compliance, application teams, and institutional leadership to advance enterprise security objectives.
Adheres to University and unit-level policies and procedures and safeguards University assets.