Cyber Threat Intelligence Lead

Cyber Threat Intelligence Lead

SailPoint’s Cybersecurity organization is seeking a Cyber Threat Intelligence Lead with a passion for cybersecurity and protecting the organization. The successful candidate will advance the CTI Program effort into a new standalone capability, drive our efforts to coordinate the vulnerability remediation and reduce the risk impact of our products.

The Cyber Threat Intelligence Lead is responsible for leading and managing the organization's Cyber Threat Intelligence Program. This role will play a critical function in proactively identifying, analyzing, and mitigating cyber threats to the organization's assets and operations. The ideal candidate will possess a strong understanding of cyber threat landscapes, intelligence gathering techniques, and risk management principles.

Our new CTI Lead will join a growing and capable threat and vulnerability management team of both emerging and established talent.  This potential team member will be comfortable with the 4 I’s at SailPoint (individual, Impact, Innovation, and Integrity) even if they’re new to the concept. This is a challenging and impactful role where you will have the opportunity to work with both internal and external stakeholders, including our fantastic colleagues in the Security Operations Center, DevOps, Product Engineering, IT, and beyond.

This role reports directly to the Head of Threat Exposure Management and will be remote.

Responsibilities:

• Develop, define scope and maintain, objectives, and processes of the threat intelligence program.
• Establish and maintain a threat intelligence framework, including data collection, analysis, dissemination, and feedback mechanisms.
• Develop and maintain a threat intelligence library and knowledge base of threat indicators, including indicators of compromise (IOCs), suspicious activity rules, and other relevant data.
• Conduct in-depth research on emerging threats, vulnerabilities, and attack vectors and analyze intelligence data to identify relevant threats to the organization and assess their potential impact.
• Monitor and analyze intelligence feeds from various sources, including open-source intelligence (OSINT), commercial threat intelligence platforms, and intelligence sharing partnerships.
• Produce high-quality threat intelligence reports and briefings for key stakeholders.
• Integrate indicators into security information and event management (SIEM) systems and other security tools.
• Develop and implement threat-informed defense strategies.
• Provide recommendations for improving security controls, incident response procedures, and security awareness training.
• Collaborate with security operations teams to proactively hunt for threats and respond to incidents.
• Build and maintain relationships with external partners.
• Continuously monitor and analyze the evolving threat landscape, including new vulnerabilities, attack techniques, and adversary tactics.
• Train a team of qualified threat intelligence analysts and provide ongoing mentorship.

Requirements:

• Strong understanding of cybersecurity concepts, including threat modeling, vulnerability assessment, incident response, and security controls.
• 8+ years of related work experience.
• Proficiency in using threat intelligence platforms and tools.
• Expertise working with SOC, engineering, product, and support teams.
• Experience with data analysis.
• Ability to communicate complex technical information to both technical and non-technical audiences. 
• Strong attention to detail and accuracy.
• Ability to prioritize tasks and meet deadlines.

Benefits and Compensation listed vary based on the location of your employment and the nature of your employment with SailPoint.

As a part of the total compensation package, this role may be eligible for the SailPoint Corporate Bonus Plan or a role-specific commission, along with potential eligibility for equity participation. SailPoint maintains broad salary ranges for its roles to account for variations in knowledge, skills, experience, market conditions and locations, as well as reflect SailPoint’s differing products, industries, and lines of business. Candidates are typically placed into the range based on the preceding factors as well as internal peer equity. We estimate the base salary, for US-based employees, will be in this range from (min-mid-max, USD):

Base salaries for employees based in other locations are competitive for the employee’s home location.

Benefits Overview

1. Health and wellness coverage: Medical, dental, and vision insurance

2. Disability coverage: Short-term and long-term disability

3. Life protection: Life insurance and Accidental Death & Dismemberment (AD&D)

4. Additional life coverage options: Supplemental life insurance for employees, spouses, and children

5. Flexible spending accounts for health care, and dependent care; limited purpose flexible spending account

6. Financial security: 401(k) Savings and Investment Plan with company matching

7. Time off benefits: Flexible vacation policy

8. Holidays: 8 paid holidays annually

9. Sick leave

10. Parental support: Paid parental leave

11. Employee Assistance Program (EAP) and Care Counselors

12. Voluntary benefits: Legal Assistance, Critical Illness, Accident, Hospital Indemnity and Pet Insurance options

13. Health Savings Account (HSA) with employer contribution

SailPoint is an equal opportunity employer and we welcome everyone to our team.  All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status.