Job Title: Principal, Cyber Threat Intelligence

Role: Full-time

Location: Remote

Compensation: $90K-$130K

About Surefire Cyber

Surefire Cyber delivers swift, strong responses to cyber incidents such as ransomware, email compromise, malware, data theft, and other threats with end-to-end response capabilities. We provide clients confidence by helping them prepare, respond, and recover from cyber incidents—and to fortify their cyber resilience after an incident.

About You

You are a highly motivated and experienced Principal, Cyber Threat Intelligence professional. You have demonstrated professional progression and hands-on experience with synthesizing multiple intelligence sources to support threat collection, analysis, and data visualization to provide situational awareness of the current and emerging cyber threat landscape. You have a strong awareness of cybersecurity, data analytics, digital forensics and incident response, SOC (Security Operations Center) operations, threat hunting, and/or a combination of the above. 

You have a passion for leveraging cyber intelligence data to enable more informed data-backed security decisions and are not afraid to jump in and assist wherever needed to support, guide, and mentor other team members and the Surefire Cyber mission. You are excited to play a critical part in shaping the way we understand adversaries’ motives, intentions, and methods as we seek to change the incident response model in the cyber insurance market.

Job Description

Surefire Cyber is actively looking for a seasoned Principal in Cyber Threat Intelligence who possesses an investigative mindset to join our rapidly expanding Incident Response (IR) startup. In this role, you will directly report to our Chief Product Officer (CPO) and collaborate closely with the Chief Technology Officer (CTO), and cross-functional teams, including Cyber Advisory and service delivery teams. Your engagement extends to external client stakeholders, where your expertise will play a crucial role in translating in-depth cyber threat research and analysis into actionable insights. This alignment is key to supporting the overall Surefire Cyber resilience roadmap.

Responsibilities

• Collaborate closely with the CPO, the CTO and fellow engineers, digital forensics, and incident response teams.
• Work with the CPO, Cyber Advisory, and Response services teams to determine intelligence needs and requirements.
• Ensure data accuracy and produce daily Cyber Threat Intelligence (CTI) reports.
• Work with engagement leads and project managers to ensure accurate data collection from Surefire IR cases. 
• Produce well-written actionable reports for stakeholders and clients.
• Conduct in-depth research, data collection, and analysis on current and emerging cyber threats.
• Regularly conduct rigorous research, analyze, and correlate time-sensitive intelligence data from multiple data sets, including open-source outlets.
• Support the Surefire Cyber Response services team in investigations.
• Analyze threat intelligence alerts and reports on Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).
• Manage multiple high-level and competing priorities.
• Ensure cyber threat intelligence needs and requests are met in a timely manner.
• Work closely with the CPO to evaluate current and emerging technologies and techniques.
• Stay current on best practices for tracking advanced persistent threats.
• Develop well-informed solutions and maintain awareness of identified patterns of tracked activity threats.
• Create, maintain, and enhance a solution for cyber threat intelligence dashboards, reports, and metrics.
• Interpret findings and proactively communicate threat awareness to stakeholders.
• Translate technical and non-technical intelligence data to produce reports/publications.
• Deliver presentations on the importance of cyber threat intelligence findings, including relevant information on threat groups to diverse audiences such as internal stakeholders and clients.

Requirements

• Professional experience in an analytical role such as a Cyber Threat Intelligence Analyst, Forensic Analyst, Security Engineer, Cybersecurity Consultant, or similar previous positions held. 
• Previous experience in working in a cybersecurity organization, or professional services firm in a client-facing role. 
• In-depth knowledge of cybercrime and the cybersecurity incident response lifecycle. 
• Up to date on the latest research and trends in the cyber threat landscape, and familiarity with reporting from cybersecurity researchers, vendors, and open-source outlets. 
• Experienc