Director - Cyber Threat Intelligence (CTI)
Core
Lead a team of cyber threat analysts to drive strategic and technical analysis of key cyber threats, advising leadership on security risks and mitigations.
Role type
Director of Cyber Threat Intelligence (CTI)
Builds
Strategic threat intelligence products, automated intelligence workflows, and integrations between CTI platforms and security technologies (SIEM, SOAR, EDR).
Domain
Cybersecurity / Threat Intelligence
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Cyber threat landscape expertise, Tactics/Techniques/Procedures (TTPs) knowledge, Threat Intelligence lifecycle management, Offensive security tactics, MITRE ATT&CK frameworks, Team leadership, Stakeholder management, Automation of intelligence processes, SIEM/SOAR/EDR integration, AI/ML evaluation for security workflows
Preferred skills
Experience with threat intelligence vendors and platforms, Passive DNS/Malware research tools, Business-technology alignment, VP/SVP level stakeholder engagement
Technologies
SIEM, SOAR, EDR, Vulnerability management, Asset management, Detection platforms, Passive DNS, Virus Total Intelligence, URLScan
Responsibilities
Lead and develop a team of tactical cyber-threat analysts; Advise CISO and senior leaders on industry cyber threats and legislation; Automate repetitive intelligence processes; Integrate internal security telemetry with external threat intelligence; Partner with security engineering to develop sustainable integrations; Evaluate emerging technologies like AI/ML for intelligence workflows; Align with senior stakeholders regarding compliance risks.
Seniority
Director, hands-on leadership & strategy
