Threat Intelligence Lead

6 days ago


Wellington, Wellington, New Zealand Canonical Full time

The Threat Intelligence Lead will own Canonical's threat intelligence strategy and execution, including understanding of which cyber threat actors are targeting Canonical, and the use of intelligence on Tactics, Techniques and Procedures (TTP) to better our products and internal cybersecurity controls.
You will collaborate with internal stakeholders as well as with the wider cybersecurity community, making sure that Canonical is recognised as a thought leader on open source threat intelligence.This role will report to the CISO.You will lead intelligence gathering and development activities on threat actors targeting software supply chains.
You'll study attack trends across the wider open source software landscape, report findings to internal security teams, and advise the wider engineering community on the best course of action to detect and mitigate possible threats.As the publisher of Ubuntu, Canonical products are directly or indirectly present in almost every organisation and household in the world, making them a prime target for threat actors.
This team's mission is to help Canonical, and by extension countless community members and companies around the world, secure their software infrastructure.What you'll do in this role:Build and own Canonical's threat intelligence strategyBuild and maintain OSINT research environmentsDevelop OSINT tradecraft, principles, and techniquesIdentify and track targeted intrusion cyber threats, trends, and new developments by cyber threat actors through analysis of proprietary and open source datasetsCollaborate across teams to inform on activity of interestCoordinate adversary/campaign trackingContribute to the wider threat intelligence community, establishing Canonical as a key contributor and thought leader in the spaceWork with product and engineering teams to explain cybersecurity threats and advise on mitigation strategiesWork with the OPSEC and IS team to help implement/update security controls prioritising cyber defenceIdentify intelligence gaps and propose new tools and research projects to fill themConduct briefings for executives, internal stakeholders and external customersThe successful Threat Intelligence Lead will be:An experienced threat intelligence leader (or similar)Knowledgeable about the current open source threat landscape and computer networking/infrastructure conceptsHighly competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools, etc.
)Able to identify, organise, catalogue, and track adversary tradecraft trends — often with incomplete dataExperienced using threat intelligence data to influence enterprise architecture or product development decisionsAn excellent communicator with the ability to clearly articulate and tailor technical content to a variety of audiencesAble to travel twice a year, for company events up to two weeks longDesired Characteristics:A professional portfolio of OSINT related scripts, tools, or frameworksDemonstrated involvement in the larger OSINT community (please share relevant links)Degree qualified, with a bachelor's degree in computer science, information security, or a related fieldCertifications in related areas (e.g.
GOSI, SANS SEC487 & SEC587, IntelTechniques OSIP, etc)Experience in a tech company or government/military signal intelligence departmentsWhat we offer you:We consider geographical location, experience, and performance in shaping compensation worldwide.
We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
In addition to base pay, we offer a performance-driven annual bonus.
We provide all team members with additional benefits, which reflect our values and ideals.
We balance our programs to meet local needs and ensure fairness globally.Distributed work environment with twice-yearly team sprints in personPersonal learning and development budget of USD 2,000 per yearAnnual compensation reviewRecognition rewardsAnnual holiday leaveMaternity and paternity leaveEmployee Assistance ProgrammeOpportunity to travel to new locations to meet colleaguesPriority Pass, and travel upgrades for long haul company eventsAbout Canonical:Canonical is a pioneering tech firm at the forefront of the global move to open source.
As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis.
We recruit on a global basis and set a very high standard for people joining the company.
We expect excellence - in order to succeed, we need to be the best at what we do.
Canonical has been a remote-first company since its inception in 2004.
Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.Canonical is an equal opportunity employer.
We are proud to foster a workplace free from discrimination.
Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#J-18808-Ljbffr



  • Wellington, Wellington, New Zealand Datacom Full time

    About DatacomDatacom is a leading IT services company in Australia and New Zealand. We work with organisations and communities to make a difference in people's lives and help them innovate and grow.Our unique culture and energy set us apart from larger organisations. We care about our people and provide a range of perks such as social events, remote working,...


  • Wellington, Wellington, New Zealand Datacom Full time

    Our WhyDatacom works with organisations and communities across Australia and New Zealand to make a difference in people's lives and help organisations use the power of tech to innovate and grow.Why join us here at Datacom?Due to the nature of the clients you will be working with, you must be a New Zealand citizen.Datacom is one of Australia and New Zealand's...


  • Wellington, Wellington, New Zealand Datacom Full time

    Job DescriptionDatacom is a leading provider of information technology professional services in Australia and New Zealand, working with organisations and communities to make a difference in people's lives. We pride ourselves on our dynamic, agile, and collaborative work environment.Key Responsibilities:Monitor cybersecurity threat feeds, forums, and...


  • Wellington, Wellington, New Zealand Datacom Full time

    Our Why   Datacom works with organisations and communities across Australia and New Zealand to make a difference in people's lives and help organisations use the power of tech to innovate and grow.  Why join us here at Datacom?  Due to the nature of the clients you will be working with, you must be a New Zealand citizen .Datacom is one of Australia and...


  • Wellington, Wellington, New Zealand Datacom Full time

    Job DescriptionDatacom works with organizations and communities across Australia and New Zealand to make a difference in people's lives. We help organizations use the power of technology to innovate and grow.About the RoleThe Cybersecurity Threat Intelligence Analyst will play a crucial role in identifying, analyzing, and reporting emerging cyber threats....


  • Wellington, Wellington, New Zealand Datacom Full time

    About the CompanyDatacom is one of Australia and New Zealand's largest suppliers of Information Technology professional services. We have managed to maintain a dynamic, agile, small business feel that is often diluted in larger organizations of our size.Our CultureWe care about our people and provide a range of perks such as social events, chill-out spaces,...


  • Wellington, Wellington, New Zealand Datacom Full time

    About the RoleThe Cybersecurity Threat Intelligence Analyst role will play a crucial role in protecting our customers from potential cyber attacks. The successful candidate will have a solid understanding of cyber threats, vulnerabilities, and attack vectors, as well as experience in threat modelling and threat profiling.Main ResponsibilitiesIdentifying,...


  • Wellington, Wellington, New Zealand Datacom Full time

    Why Work at Datacom?Datacom is one of Australia and New Zealand's largest suppliers of Information Technology professional services. We offer a dynamic, agile, and small business feel that sets us apart from larger organisations.We are committed to creating an inclusive and welcoming workplace for everyone. We take pride in the steps we have taken and...


  • Wellington, Wellington, New Zealand New Zealand Army Full time

    Job OverviewAbout the RoleAs a member of Defence Counter Intelligence (DEFCI), you will be providing subject matter expertise to the New Zealand Defence Force (NZDF) on behalf of Defence Security. This team delivers CI products and guidance through the identification, analysis, and assessment of information indicating potential threats to the safety and...


  • Wellington, Wellington, New Zealand New Zealand Parliament Full time

    This senior role focuses on delivering high-quality intelligence, threat assessments, and training to ensure members' personal security and public event safety.About the Role:The primary objective of this position is to provide expert security advice and services to members attending events outside the Parliamentary Precinct.Developing and implementing...


  • Wellington, Wellington, New Zealand Clarus Full time

    Job BriefWe're looking for a Cybersecurity Threat Hunter to join our team, responsible for detecting and responding to cyber threats across our systems and data. This role requires strong analytical and problem-solving skills, as well as excellent communication and teamwork abilities.Key Responsibilities:Detect and respond to cyber threats, using a range of...


  • Wellington, Wellington, New Zealand New Zealand Army Full time

    About the PositionThis role sits within the Counter Intelligence and Personnel Security (CIPS) function, which encompasses PERSEC, the Clinical Psychology function, and DEFCI. CIPS is also responsible for managing the NZDF approach to Insider Threat activities.Key ResponsibilitiesYour duties will include identifying, analyzing, and assessing intelligence or...


  • Wellington, Wellington, New Zealand New Zealand Intelligence Community Full time

    Company OverviewThe New Zealand Intelligence Community (NZIC) is the heart of national security, providing essential intelligence to protect New Zealand and its people.We are a diverse and talented team, working at the forefront of cyber defence. Our mission is to detect and disrupt high-impact cyber threats for nationally significant organisations.


  • Wellington, Wellington, New Zealand New Zealand Intelligence Community Full time

    Role OverviewAs a Product Owner for the New Zealand Intelligence Community, you will be responsible for driving how we use and adapt IT systems to deliver intelligence products and services to customers. This involves defining the vision and strategy for a suite of products in this domain, developing a clear and achievable roadmap, and leveraging your team...


  • Wellington, Wellington, New Zealand New Zealand Intelligence Community Full time

    Product Owner RoleAs a Product Owner for the New Zealand Intelligence Community, you will be responsible for defining the vision and strategy for a suite of products in this domain, developing a clear and achievable roadmap, and leveraging your team of engineers and other cross-functional expertise across the wider directorate. About Our MissionThe...


  • Wellington, Wellington, New Zealand New Zealand Intelligence Community Full time

    About the RoleWe are looking for a highly motivated and experienced Technical Leader to join our Intelligence Directorate. The successful candidate will have a strong background in data engineering, data analysis, software development, or system engineering and experience in a line-management role. You will be responsible for leading and empowering a team to...


  • Wellington, Wellington, New Zealand New Zealand Intelligence Community Full time

    Job DescriptionWe are seeking a Product Owner to lead our software product development team. The successful candidate will be responsible for defining the vision and strategy for a suite of products in this domain, developing a clear and achievable roadmap, and leveraging their team of engineers and other cross-functional expertise across the wider...


  • Wellington, Wellington, New Zealand New Zealand Government Full time

    Pursue a challenging career with the New Zealand Government as a Principal Intelligence Analyst.This key role requires an experienced Intelligence Analyst to provide valuable insights on the impacts of government policies and identify risks and opportunities.You will work closely with our team and stakeholders to build relationships and long-term customer...


  • Wellington, Wellington, New Zealand New Zealand Army Full time

    Job DescriptionIn this role, you will be working as part of the Defence Counter Intelligence team, providing subject matter expertise to the New Zealand Defence Force on behalf of Defence Security.Main TasksYour main tasks will include identifying, analyzing, and assessing intelligence or security threats, delivering briefs and intelligence reports to senior...


  • Wellington, Wellington, New Zealand New Zealand Army Full time

    Mo te tunga | About the roleAs a member of Defence Counter Intelligence (DEFCI) you will be providing subject matter expertise to the New Zealand Defence Force (NZDF) on behalf of Defence Security.This team delivers CI products and guidance through the identification, analysis and assessment of information indicating potential threats to the safety and...