Lead, Cyber Defense & Response

** Your Team & Role
** As the Lead for Strategic Threat Intelligence, you will help establish and mature a capability that connects internal security data with the external threat landscape to inform long-term security decisions. You will analyze internal trends alongside industry intelligence and partner insights to identify attack patterns and areas of opportunity. Using Security Information and Event Management (SIEM) telemetry and enterprise analytics platforms, you will create dashboards and metrics that visualize these trends and deliver clear, actionable intelligence reports and briefings to senior stakeholders and technology leaders—helping them understand how internal trends align with external threats and where to focus resources.
** Here is What You Can Expect on a Typical Day*
* • Analyze internal security data and compare it with external threat intelligence and industry trends to identify patterns, gaps, and emerging risks.

• Develop and maintain dashboards and metrics using Security Information and Event Management (SIEM) telemetry and enterprise analytics platforms to visualize incident trends and support stakeholder decision-making.

• Define and refine Priority Intelligence Requirements (PIRs) to ensure intelligence efforts align with stakeholder needs and business risk priorities.

• Prepare and deliver intelligence reports and briefings to senior security advisors and technology leaders—providing clear insights that inform resource allocation and risk mitigation strategies. In addition to strategic recommendations, you will communicate findings from trend analyses, highlighting patterns observed in internal data compared to external threat activity, so stakeholders understand evolving risks and can prioritize defenses accordingly.

• Collaborate with external partners and industry groups (e.g., ISACs) to incorporate broader threat context into analysis.

• Mentor junior analysts by reviewing their work, sharing best practices, and helping them strengthen analytical and reporting skills.

• Manage and guide team members by setting priorities, reviewing deliverables, and fostering professional growth through mentorship and feedback  
• Work closely with stakeholders to gather feedback and continuously improve the strategic intelligence function.
** The Skills & Expertise You Bring*
* • Strong experience in cyber threat intelligence with a focus on strategic analysis and reporting.  
• Proficiency in Security Information and Event Management (SIEM) platforms and enterprise analytics tools for building dashboards and visualizing trends.  
• Ability to analyze large datasets to identify patterns, correlations, and emerging risks.  
• Experience with agile development methodologies.

• Excellent written and verbal communication skills for delivering intelligence to senior stakeholders.  
• Experience defining Priority Intelligence Requirements and aligning intelligence outputs to business risk.  
• Complete understanding of the intelligence cycle including analytical methodologies such as Analysis of Competing Hypotheses and the Diamond model.  
• Deep understanding of MITRE frameworks and the ability to apply them effectively, including ATT&CK for mapping adversary behaviors, ATLAS for addressing AI-related threats, D3

FEND for identifying defensive techniques, and the Cyber Resiliency Engineering Framework (CREF) for integrating resiliency principles into security strategies.  
• Understanding of SaaS and Cloud Service Providers.  
• Collaborative mindset with experience engaging external partners and industry groups.  
• Leadership skills with a passion for mentoring and developing junior analysts.  
• Ability to learn new skills and knowledge on an on-going basis through self-initiative and tackling challenges.  Applied experience with several of the following:  
• Cyber Threat Intelligence  
• Digital Forensics  
• Cyber Security Operations  
• Cyber Incident Response  
• Threat Hunting and Adversary Emulation  
• Automation and Engineering  

Preferred Qualifications  
• Experience with Splunk or similar Security Information and Event Management (SIEM) platforms.  
• Experience with data visualization tools…