CTI Program Lead — Senior Threat Intelligence (Hybrid)

S&P Global Mobility; Monterrey; Hybrid; MXN 850,000 - 1,276,000; Full time

Job summary

Mobility Global, CARFAX division, Monterrey, Mexico, seeks a senior Cyber Threat Intelligence professional to own the CTI program end-to-end. You will define processes, monitor intel from multiple sources, and produce actionable briefs for Cyber Defense.

You will implement AI-assisted workflows, collaborate with DFIR and Threat Hunting teams, and translate intel into detection context with Google SecOps.

Qualifications

• 4+ years of hands-on experience in cyber threat intelligence.
• Experience with commercial threat intel platforms (e.g., Recorded Future, Flashpoint, Mandiant, Google Threat Intel, CrowdStrike).
• Strong understanding of threat intel lifecycle and frameworks (MITRE ATT&CK, Cyber Kill Chain).
• Experience implementing AI aids to CTI operations and running an intel program end to end.
• Excellent written and verbal communication; ability to document solutions, detections and workflows.

Responsibilities

• Own and run the CTI program end to end from collection through analysis, production and dissemination.
• Define and mature the CTI processes, standards, and roadmap.
• Serve as primary contact for cyber threat intel across Cyber Defense.
• Monitor and analyze intel from commercial platforms and open sources; manage sources and subscriptions.
• Produce actionable intelligence products: briefs, reports, and actor profiles.
• Track threat actors, campaigns, and TTPs relevant to the industry.
• Implement AI agents to support CTI operations and accelerate triage of data.
• Partner with DFIR/Threat Hunting to feed intel into investigations and hunts.
• Collaborate with Security Engineering to translate intel into detection context.

Skills

Cyber threat intel

Threat intel platforms

MITRE ATT&CK

AI in security

Communication skills

Tools

Recorded Future

Flashpoint

Mandiant Threat Intel

Google Threat Intel

CrowdStrike Falcon

Job description

Mobility Global, CARFAX division, Monterrey, Mexico, seeks a senior Cyber Threat Intelligence professional to own the CTI program end-to-end. You will define processes, monitor intel from multiple sources, and produce actionable briefs for Cyber Defense.

You will implement AI-assisted workflows, collaborate with DFIR and Threat Hunting teams, and translate intel into detection context with Google SecOps.