RemoteLeaf Logo
Log in Sign up

Manager, Threat Intelligence

6 days, 10 hours ago
United States
Full-time
Lead
Security Engineer
Cybersecurity
AWS Azure Cybersecurity Python SIEM Splunk
Apply Now
PDI Technologies,

PDI Technologies,

PDI Technologies helps fuel and convenience businesses increase productivity, profitability, loyalty, and security by Connecting Convenience. PDI Technologies resides at the intersection of productivity and sales growth, delivering powerful solutions t...

Gas Utilities
1001-5000
Founded 1983
$7M raised
View All Jobs 7

Description

  • Hire, coach, and develop a remote team of threat analysts, hunters, and detection engineers.
  • Set team priorities, career paths, performance metrics, and service plans while remaining hands-on with hunts, intelligence, and detections.
  • Define intelligence requirements with SOC leadership and customers and manage the full intelligence lifecycle.
  • Produce strategic, operational, and tactical intelligence products, including actor profiles, campaign analyses, threat briefs, and customer-specific reports.
  • Track financially motivated threat actors, payment fraud operations, ransomware crews, and threats affecting retail and hospitality environments.
  • Own detection content strategy across SIEM and EDR/XDR platforms, including development, testing, tuning, and MITRE ATT&CK coverage measurement.
  • Lead hypothesis-driven threat hunts across customer environments and convert findings into new detections.
  • Use automation and AI to scale enrichment, triage support, and reporting.
  • Provide intelligence context during major incidents and lead complex escalations.
  • Brief customers and executives, partner with SOC, Incident Response, Security Engineering, product, and company leaders, and represent PDI in industry-sharing communities.

Requirements

  • 8+ years of cybersecurity experience spanning threat intelligence, threat hunting, incident response, detection engineering, or security operations.
  • 3+ years of experience managing technical security teams, including hiring and employee development.
  • Deep knowledge of adversary tactics, MITRE ATT&CK, the intelligence lifecycle, and the Diamond Model.
  • Experience producing finished intelligence for both technical and executive audiences.
  • Hands-on experience with SIEM platforms such as FortiSIEM, Microsoft Sentinel, Splunk, Google Chronicle, or ArcSight, plus EDR/XDR platforms and query languages such as KQL or SPL.
  • Experience supporting complex investigations and incident response.
  • Strong written, verbal, and presentation skills, including translating technical findings into business risk.
  • Bachelor’s degree in a related field or equivalent experience.
  • Experience at an MSSP or MDR provider serving multiple customers (preferred).
  • Experience with retail, hospitality, payments, POS systems, PCI DSS, detection-as-code, Sigma, SOAR, Python, MISP, Recorded Future, Azure, AWS, Microsoft 365, intelligence-sharing communities, or certifications such as GCTI, GCFA, GCIH, GREM, or CISSP (preferred).

Benefits

  • Competitive salary and market-competitive benefits.
  • Quarterly perks program.
  • Ample paid time away and support for work-life balance.
  • Hybrid working arrangements where appropriate.
  • Continuous learning, professional certification, and leadership development opportunities.
  • Supportive global culture focused on diversity, inclusion, authenticity, trust, curiosity, and diverse perspectives.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Lanterncare

Principal IAM Engineer

Lanterncare

Lantern is seeking a remote Principal IAM Engineer to own and strengthen the identity control plane that governs secure access to PHI across its specialty-care platform.

United States Full-time Lead Security Engineer
GitHub HIPAA OpenID Connect PowerShell Python SAML Terraform
7 hours, 26 minutes ago
Laminar Projects

Vigilant IT Security Manager - Portugal/Poland (Remote)

Laminar Projects 51-200 Construction & Engineering

Lead IT security and operations at Laminar Projects, a construction-technology consultancy, to strengthen cybersecurity, maintain compliance, and build a high-performing IT function.

Poland Portugal Romania Full-time Lead Security Engineer
Cybersecurity
10 hours, 11 minutes ago
N-iX

Interim Head of Information Security

N-iX 1001-5000 Internet Software & Services

N-iX is seeking an Interim Head of Information Security for a 4–6-month engagement to lead a client’s security strategy, embed secure-by-design practices, and strengthen audit readiness and resilience.

Europe Ukraine Contract Executive Security Engineer
Cybersecurity
10 hours, 26 minutes ago
FireMon.com

Network Security Engineer

FireMon.com 201-500 Professional Services

FireMon is seeking a hands-on Network Security Engineer to develop, test, and support integrations that help enterprises govern network security policy across on-premises, cloud, and hybrid environments.

United States Full-time Mid Level Security Engineer
Cisco Juniper Network Security
10 hours, 26 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers