Threat Intelligence Lead
The Threat Intelligence Lead at Canonical will own the company's threat intelligence strategy and execution, focusing on understanding cyber threat actors targeting Canonical and utilizing intelligence on Tactics, Techniques, and Procedures (TTP) to enhance products and internal cybersecurity controls. This role involves collaboration with internal stakeholders and the broader cybersecurity community to establish Canonical as a thought leader in open source threat intelligence.
Key responsibilities include building and maintaining OSINT research environments, developing OSINT tradecraft and techniques, identifying and tracking targeted intrusion cyber threats through analysis of proprietary and open source datasets, and coordinating adversary and campaign tracking. The role also involves working with product and engineering teams to explain cybersecurity threats and advise on mitigation strategies, as well as conducting briefings for executives, internal stakeholders, and external customers.
The ideal candidate will be an experienced threat intelligence leader with knowledge of the current open source threat landscape and computer networking concepts. Proficiency with OSINT tools such as Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, and social media scraping tools is essential. The candidate should be able to identify, organize, catalog, and track adversary tradecraft trends, often with incomplete data, and have experience using threat intelligence data to influence enterprise architecture or product development decisions. Excellent communication skills and the ability to tailor technical content to various audiences are also required.
Canonical offers a distributed work environment with twice-yearly team sprints in person, a personal learning and development budget of USD 2,000 per year, annual compensation reviews, recognition rewards, annual holiday leave, maternity and paternity leave, an Employee Assistance Programme, opportunities to travel to new locations to meet colleagues, and Priority Pass with travel upgrades for long-haul company events.
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the publisher of Ubuntu, one of the most important open source projects and the platform for AI, IoT, and the cloud, Canonical is changing the world daily. The company recruits globally and sets a high standard for its team members, expecting excellence to succeed. Canonical has been a remote-first company since its inception in 2004, offering a work environment that challenges employees to think differently, work smarter, learn new skills, and raise their game.