← All roles
C

Threat Intelligence Lead

Canonical · Engineering · Lead · 4d ago

✓

Anyone, anywhere in the world can apply.

Canonical hires globally with location-independent recruitment and worldwide compensation benchmarking.

WorldwideAny timezoneThreat IntelligenceOSINTCybersecurityUbuntu

Applies on the original listing · via Jobicy

Who can apply

Read straight from the listing, so you know before you spend time on it.

Anywhere in the world

Anyone, anywhere in the world can apply.

Canonical hires globally with location-independent recruitment and worldwide compensation benchmarking.

Async-first
The listing doesn't promise async-first working.
Contractor / B2B
No mention of hiring international contractors or invoicing.
Global stipend
No home office or equipment budget mentioned.
Annual retreat
Travel twice a year for in-person team sprint events lasting up to two weeks.

Read from the listing automatically. Always confirm the details with the company before you accept an offer.

About the role

As the Threat Intelligence Lead reporting directly to the CISO, you will own Canonical’s threat intelligence strategy and execution. You will lead intelligence gathering and tracking on cyber threat actors targeting software supply chains, study attack trends across the open source software landscape, and advise product and engineering teams on how to mitigate threats. Additionally, you will build OSINT research environments, develop tradecraft, and represent Canonical as a thought leader in open source threat intelligence.

What you'll do

  • Build and own Canonical’s threat intelligence strategy, tradecraft, and OSINT research environments.
  • Identify, track, and catalog targeted intrusion cyber threats and adversary campaigns using proprietary and open source datasets.
  • Advise product, engineering, and OPSEC teams on cybersecurity threats and mitigation strategies.
  • Identify intelligence gaps and propose new tools, research projects, and security controls.
  • Conduct executive briefings and contribute insights to the wider threat intelligence and open source communities.

What you bring

  • Proven experience as a threat intelligence leader or in a similar cybersecurity role.
  • Deep knowledge of the open source threat landscape, adversary tradecraft, and computer networking concepts.
  • High proficiency with OSINT tools such as Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, and Shodan.
  • Strong communication skills with the ability to articulate technical risk to diverse audiences.
  • Ability to travel internationally twice a year for team events lasting up to two weeks.

About Canonical

Canonical is the pioneering tech firm behind Ubuntu, one of the world's most ubiquitous open-source platforms for AI, IoT, and cloud computing. Operating as a remote-first organization since 2004, the company recruits talent globally.

View Canonical profile & open roles →

Get new verified roles in your inbox — no account needed.

Unsubscribe any time. See our Privacy Policy.