Threat Intelligence Lead

Pyramid Consulting•Irving, TX

15h•Onsite

About The Position

Pyramid Consulting, Inc. is hiring a Threat Intelligence Lead for a 06+ month contract opportunity with long-term potential. The role is onsite in Irving, Texas, supporting a client in the retail industry. The Threat Intelligence Lead will own and mature the organization’s threat intelligence program, lead analysts, produce intelligence for executive and board-level audiences, and partner across security functions to translate intelligence into risk-based actions.

Requirements

At least 6 years of experience in threat intelligence, security operations, or incident response.
Prior experience mentoring or leading analysts.
Deep working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques.
Proven experience producing and delivering intelligence to executive and board-level audiences.
Experience directing threat intelligence platform and vendor strategy, including feed evaluation and management.
People-leadership skills, including hiring, coaching, and performance management of analysts.
Excellent written and verbal communication skills, with the ability to translate technical findings into business risk.
Sound analytic judgment and the ability to state and defend confidence levels under scrutiny.
Familiarity with threat intelligence platforms such as MISP, ThreatConnect, Anomali, and Recorded Future.
Experience with SIEM/SOAR tools such as Splunk and Palo Alto Cortex XSOAR.
Knowledge of malware and sandbox analysis tools, including VirusTotal and Hybrid Analysis.
Understanding of frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
Experience with OSINT and dark web tools such as Maltego and Shodan.
Familiarity with vulnerability and exposure data sources such as CVE/NVD and the CISA KEV catalog.
Experience with program and reporting tools, including KPI dashboards and executive reporting templates.

Responsibilities

Lead the threat intelligence program and set collection priorities based on organizational risk and stakeholder needs.
Own the threat intelligence roadmap, including program maturity, tooling, staffing, and process improvements.
Establish and enforce standards for intelligence products, source reliability, and confidence-level reporting.
Manage and develop the analyst team, including hiring, coaching, and performance management.
Deliver strategic and operational intelligence and author high-stakes products for executive and board-level briefings.
Direct the organization’s threat landscape assessment and prioritize vulnerability remediation guidance in partnership with Vulnerability Management.
Own detection enablement and adversary emulation, partnering with detection engineering to turn intelligence into actionable detection logic.
Represent threat intelligence in leadership and governance forums and collaborate with cross-functional teams to align intelligence with broader security strategy.