Technical Intelligence & Investigations Lead

Planet Nine; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Planet Nine is seeking an experienced Technical Intelligence & Investigations Lead with a strong military/defense intelligence background. You will lead end-to-end digital collection investigations, focusing on network research, IP analysis, data enrichment and digital attribution.

You will act as the primary technical liaison with external stakeholders, bridging SIGINT and OSINT methods, and you will guide hands-on investigations, crypto tracing, and attribution to real-world entities.

Qualifications

• Former Network Intelligence Officer, SIGINT Officer, or Intelligence Operations Manager with proven digital operations experience.
• Hands-on experience in cross-SIGINT/OSINT operations bridging technical signal collection and open-source environments.
• 2-3+ years of direct, hands-on experience in network research, IP analysis, and data enrichment methodologies.
• Strong knowledge of internet protocols (TCP/IP, DNS, WHOIS, BGP) and familiarity with tools like Shodan, Maltego, Wireshark.
• Excellent ability to connect small technical details into a cohesive, actionable intelligence picture.
• Full professional proficiency in English and Hebrew.

Responsibilities

• Tech-Driven Investigations: Plan, develop, and execute complex digital intelligence collection investigations from end to end.
• Stakeholder Collaboration: Act as the primary technical point of contact with external stakeholders' technical teams to deliver operational results.
• Cross-Discipline Fusing: Design and execute investigation frameworks that fuse SIGINT and OSINT methods.
• Hands-on Attribution: Conduct deep-dive technical research to attribute activities and networks to entities.
• Crypto Investigations: Trace and analyze cryptocurrency transactions and blockchain activity to real-world entities.
• Data Enrichment: Enrich data using OSINT/SIGINT techniques to connect indicators.
• Network & IP Analysis: Analyze network traffic, IP routing, DNS configurations, and ASNs.
• Tool Integration: Leverage advanced collection, scraping, and network analysis tools to optimize the intelligence pipeline.

Skills

Intelligence background

Operational hybridity

Hands-on experience

Technical proficiency

Analytical skills

Languages (English, Hebrew)

Tools

Shodan

Maltego

Wireshark

Job description

We are seeking an experienced and tech-savvy Technical Intelligence & Investigations Lead with a strong military/defense intelligence background (former Collection / Intelligence Officer, or Operations Managers; SIGINT Officer or Technical Operations Lead preferred). This role requires a unique blend of investigative leadership, stakeholder collaboration, and deep hands-on technical expertise. You will be responsible for leading complex, end-to-end digital collection investigations, focusing heavily on network research, IP analysis, data enrichment and digital attribution.

Responsibilities:

• Tech-Driven Investigations: Plan, develop, and execute complex digital intelligence collection investigations from end to end.
• Stakeholder Collaboration: Act as the primary technical point of contact, fruitfully collaborating with external stakeholders technical teams to deliver operational results.
• Cross-Discipline Fusing: Design and execute investigation frameworks that dynamically cross-reference, fuse, and leverage both SIGINT and OSINT operational methodologies.
• Hands-on Attribution: Conduct deep-dive technical research to attribute malicious activities, digital footprints, and network infrastructures to specific entities or threat actors.
• Crypto Investigations: Trace and analyze cryptocurrency transactions, cluster digital wallets, and attribute blockchain activity to real-world entities.
• Data Enrichment: Perform hands-on data enrichment utilizing advanced tools, databases, and OSINT/SIGINT techniques to connect disparate digital indicators.
• Network & IP Analysis: Analyze network traffic, IP routing, subnets, DNS configurations, and Autonomous System Numbers (ASNs).
• Tool Integration: Leverage and integrate advanced collection, scraping, and network analysis tools to optimize the organization's intelligence pipeline.

Requirements:

Must Have

• Intelligence Background: Former Network Intelligence Officer, SIGINT Officer, or Intelligence Operations Manager with proven digital operations experience.
• Operational Hybridity: Proven, hands-on experience driving cross-SIGINT/OSINT operations, with a strong capability to bridge technical signal collection and open-source intelligence investigative environments.
• Hands-on Experience: 2-3+ years of direct, hands-on experience in network research, IP analysis, and data enrichment methodologies.
• Technical Proficiency: Strong knowledge of internet protocols (TCP/IP, DNS, WHOIS, BGP) and familiarity with network/threat intelligence tools (e.g., Shodan, Maltego, Wireshark).
• Analytical Skills: Excellent capability to connect small, highly technical details into a cohesive, actionable intelligence picture.
• Languages: Full professional proficiency in English and Hebrew.

Nice to Have

• Crypto Tracing Skills: Experience in blockchain analytics, cryptocurrency tracking, and utilizing crypto intelligence platforms (e.g., Chainalysis, TRM Labs, CipherTrace, or equivalent).
• Cross-Functional Collaboration: Experience managing interfaces and collaborating effectively with both highly technical and non-technical stakeholders, driving joint operational missions.