Lead Threat Intelligence Analyst

Circle is a financial technology company at the epicenter of the emerging internet of money, where value can finally travel like other digital data — globally, nearly instantly and less expensively than legacy settlement systems. This ground-breaking new internet layer opens up previously unimaginable possibilities for payments, commerce and markets that can help raise global economic prosperity and enhance inclusion. Our infrastructure – including USDC, a blockchain-based dollar – helps businesses, institutions and developers harness these breakthroughs and capitalize on this major turning point in the evolution of money and technology.

What you’ll be part of:

Circle is committed to visibility and stability in everything we do. As we grow as an organization, we're expanding into some of the world's strongest jurisdictions. Speed and efficiency are motivators for our success and our employees live by our company values: Multistakeholder, Mindfulness, Driven by Excellence and High Integrity. Circlers are consistently evolving in a remote world where strength in numbers fuels team success. We have built a flexible and diverse work environment where new ideas are encouraged and everyone is a stakeholder.

What you’ll be responsible for:

In 2020, Circle unveiled Circle APIs: a set of solutions and smarter technology to help businesses accept payments in a more global, scalable and efficient alternative to traditional banking rails (spoiler: we’re using USD Coin under the hood). The Circle Security Team works to protect Circle; our customers, clients, and partners; and the financial markets upon which we rely.  

The Circle Threat Intelligence Program is responsible for researching a range of threats to the company and the blockchain/Web3 space.  The goal of the program is to enable our internal stakeholders to use refined and vetted intelligence to make better decisions and understand the risks facing the organization.

As a Threat Intelligence Analyst at Circle, you will be responsible for running Circle's Threat Intelligence Program operations during the US timezone. This is a critical role that requires the ability to effectively monitor, triage, and assess incoming threat intelligence feeds according to defined Priority Intelligence Requirements (PIRs).

We are looking for someone who already understands threats to Web3 companies, has a customer-centric mindset, can work quickly and thinks about ways to automate and disseminate collections to service a wide range of internal customers.

What you'll work on:

• Daily monitoring, prioritized triage, and assessment of incoming threat intelligence feeds
• Process incoming Requests for Intelligence (RFI) requests in a timely manner
• Produce threat intelligence products in the form of written reports, verbal briefings, and automated (“self-service”) intelligence dissemination
• Streamline intelligence operations by developing automated workflows for collecting, enriching, and disseminating threat intelligence using a SOAR (Security Orchestration, Automation, and Response) platform and a TIP (Threat Intelligence Platform).
• Building and maintaining relationships with internal stakeholders and external industry partners
• Contributing to the overall direction and maturity strategy of Circle's Threat Intelligence Program
• Assisting with threat hunts

You will aspire to our four core values:

• Multistakeholder - you have dedication and commitment to our customers, shareholders, employees and families and local communities.
• Mindful - you seek to be respectful, an active listener and to pay attention to detail.  
• Driven by Excellence - you are driven by our mission and our passion for customer success which means you relentlessly pursue excellence, that you do not tolerate mediocrity and you work intensely to achieve your goals. 
• High Integrity - you seek open and honest communication, and you hold yourself to very high moral and ethical standards.  You reject manipulation, dishonesty and intolerance.

What you'll bring to Circle:

• Demonstrated experience in the cyber threat intelligence field (ideally 4+ years or equivalent experience), with a focus on blockchain and Web3 research (understanding smart contract and protocol exploits, blockchain attacks, etc.)
• Strong understanding of cybersecurity threats, threat actors, and the overall threat landscape
• Proficiency in using a SOAR and developing automated workflows for intelligence collection and enrichment
• Experience in performing complex SQL queries to extract and an