Threat Intelligence Lead
Core
Own Canonical's threat intelligence strategy and execution, focusing on tracking cyber threat actors targeting the open source software supply chain and advising engineering teams on mitigation.
Role type
Senior IC threat intelligence lead (open source security)
Builds
Threat intelligence reports, adversary tracking capabilities, and security controls for Canonical's software infrastructure
Domain
Cybersecurity / Open Source Software / Threat Intelligence
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure
Required skills
OSINT research and tradecraft, adversary campaign tracking, analysis of proprietary and open source datasets, enterprise architecture influence, executive briefing, security control implementation
Preferred skills
OSINT tool development (scripts/frameworks), community engagement in OSINT space, experience in government/military signal intelligence
Technologies
Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools
Responsibilities
Build and maintain OSINT research environments, identify and track targeted intrusion threats, collaborate with product/engineering on threat mitigation, conduct briefings for executives and customers, identify intelligence gaps and propose new research projects
Seniority
Senior, hands-on IC with strategic ownership