Lead Threat Intelligence Investigator

Oracle; Austin (TX); On-site; USD 104,000 - 235,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan with company match

Paid time off

Paid holidays

Parental leave

Flexible spending accounts

Commuter benefits

Job summary

Oracle is seeking a Threat Intelligence Investigator to track threat actors and lead operational activities across the OCI environment. You will manage large datasets, produce intelligence products, and adapt to an fast-paced environment while collaborating with security teams and customers.

The role emphasizes tracking APT groups, leveraging OSINT, and developing detection signatures to strengthen Oracle’s defenses, with opportunities to influence strategic security decisions globally.

Qualifications

• Requires 6-10+ years in analytical threat intel and operations.
• Experience tracking distinct APT groups and their methodologies.
• Strong OSINT research across topics.
• Proficient in detecting and attributing threat activity.

Responsibilities

• Lead investigations through in depth analysis and collection efforts.
• Provide detailed attribution analyses for threat actors.
• Communicate complex technical matters to non-technical audiences.
• Coordinate post-incident reviews and drive remediation actions.
• Stay updated on emerging threats and adapt defenses accordingly.
• Manage threat intelligence platforms and related tools.
• Collaborate with cloud security teams during incident response.
• Develop intelligence processes for timely delivery of reports.
• Elevate analytic quality with peer review and feedback.
• Handle high volume, time-sensitive intelligence requests.

Skills

Threat intelligence

APT tracking

OSINT research

Log analysis

Threat attribution

Communication skills

Education

Bachelor or Master in CS/CE/Cybersecurity

Tools

YARA

Snort

Suricata

Bro/Zeek

Job description

Oracle is seeking a Threat Intelligence Investigator to track threat actors and lead operational activities across the OCI environment. You will manage large datasets, produce intelligence products, and adapt to an fast-paced environment while collaborating with security teams and customers.

The role emphasizes tracking APT groups, leveraging OSINT, and developing detection signatures to strengthen Oracle’s defenses, with opportunities to influence strategic security decisions globally.