The role involves producing actionable intelligence to drive detections, hunts, and defensive priorities within a security team. The practitioner tracks adversaries targeting AI labs and builds tooling to convert raw indicators into operational defenses. Responsibilities include performing technical analysis of malware and attacker infrastructure to extract attribution signals. The individual collaborates with detection engineers and incident responders to translate intelligence into security rules and incident context. Additionally, the role requires building external intelligence-sharing relationships with peer companies and government partners.

Candidates must have at least five years of hands-on experience in cyber threat intelligence, threat hunting, or intrusion analysis. Proficiency in Python and the ability to build automation and data pipelines are required. Applicants should possess deep knowledge of nation-state or advanced criminal threat actors and their tradecraft. A minimum of a bachelor's degree or an equivalent combination of education, training, and experience is necessary.