Director of Cyber Threat Intelligence (CTI)
Core
Lead a highly technical Cyber Threat Intelligence (CTI) function to deliver strategic, operational, and tactical intelligence that reduces risk across manufacturing, clinical trial platforms, and R&D environments.
Role type
Director of Cyber Threat Intelligence (CTI)
Builds
Strategic CTI programs, adversary prioritization frameworks, attack path models, and actionable intelligence for Vulnerability Management, Detection Engineering, and Incident Response.
Domain
Cybersecurity / Biopharmaceutical
Required skills
Cyber threat intelligence strategy, adversary prioritization frameworks, attack path modeling (IT-to-OT), Dark Web monitoring, Third-party risk intelligence, Structured threat actor attribution (Diamond Model), Vulnerability intelligence, Detection engineering collaboration, Incident response support, Team leadership and development
Preferred skills
MITRE ATT&CK Enterprise/ICS expertise, Purple-team exercises, Sector body engagement (e.g., H-ISAC), Tooling optimization (TIP, SIEM, EDR)
Technologies
MITRE ATT&CK, Diamond Model, TIP, SIEM, EDR, Sigma, KQL, SPL
Responsibilities
Define CTI vision and roadmap; design and operate adversary scoring rubrics; implement MTTI metrics; build attack path models; monitor dark web and closed sources; deliver third-party risk insights; lead threat actor attribution; support vulnerability management and detection engineering; provide real-time incident context; produce executive intelligence reports; optimize tooling integrations; lead external engagement; recruit and mentor CTI analysts.
Seniority
Director, strategic leadership with hands-on technical oversight
