Threat Intelligence Lead

Pyramid Consulting, Inc; Irving (TX); On-site; USD 83,000 - 94,000; Part time

Benefits offered by this job

Health insurance

401(k) plan

Paid sick leave

Job summary

Pyramid Consulting, Inc. is seeking a Threat Intelligence Lead for an onsite Irving, TX role, on a 06+ months contract. You will lead the threat intelligence program, set priorities, and guide the maturity of the TI function.

The role requires strong leadership, executive communication, and expertise in ATT&CK and TI platforms. You will own the TI roadmap, coordinate with Vulnerability Management, and translate intelligence into actionable detection logic.

Qualifications

• 6+ years of threat intelligence, security operations, or incident response.
• Experience mentoring or leading analysts.
• Deep knowledge of MITRE ATT&CK and analytic techniques.
• Ability to deliver intelligence to executives and boards.
• Experience with TI platforms and vendor strategy.
• Strong leadership and communication skills.

Responsibilities

• Lead the threat intelligence program and set collection priorities.
• Own the TI roadmap focusing on maturity, tooling, staffing, and processes.
• Set standards for intelligence products and source reliability.
• Manage and develop the analyst team, including hiring and coaching.
• Deliver strategic and operational intelligence for executive briefings.
• Prioritize vulnerability remediation guidance with Vulnerability Management.
• Own detection enablement and translate intelligence into detection logic.
• Represent TI in leadership forums and align TI with security strategy.

Skills

Leadership

Executive communication

Analytical judgment

MITRE ATT&CK knowledge

Threat intelligence program management

Adversary emulation

OSINT tooling

Threat intelligence strategy

Tools

MISP

ThreatConnect

Anomali

Recorded Future

Splunk

Palo Alto Cortex XSOAR

VirusTotal

Hybrid Analysis

Maltego

Shodan

Job description

Immediate need for a talented Threat Intelligence Lead. This is a 06+months contract opportunity with long-term potential and is located in Irving, TX(Onsite).

Job ID:26-25365

Pay Range: $60 - $68/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Lead the threat intelligence program, setting collection priorities based on organizational risk and stakeholder needs.
• Own the threat intelligence roadmap, focusing on program maturity, tooling, staffing, and process improvements.
• Establish and enforce standards for intelligence products, source reliability, and confidence-level reporting.
• Manage and develop the analyst team, including hiring, coaching, and performance management.
• Deliver strategic and operational intelligence, authoring high-stakes products for executive and board-level briefings.
• Direct the organization’s threat landscape assessment and prioritize vulnerability remediation guidance in partnership with Vulnerability Management.
• Own detection enablement and adversary emulation, partnering with detection engineering to convert intelligence into actionable detection logic.
• Represent threat intelligence in leadership and governance forums, collaborating with cross-functional teams to align intelligence with broader security strategy.

Key Requirements and Technology Experience:

• 6+ years of experience in threat intelligence, security operations, or incident response, with prior experience mentoring or leading analysts.
• Deep working knowledge of MITRE ATT&CK, the intelligence cycle, and structured analytic techniques.
• Proven experience producing and delivering intelligence to executive and board-level audiences.
• Experience directing threat intelligence platform and vendor strategy, including feed evaluation and management.
• Strong people-leadership skills, including hiring, coaching, and performance management of analysts.
• Excellent written and verbal communication skills, with the ability to translate technical findings into business risk.
• Sound analytic judgment, with the ability to state and defend confidence levels under scrutiny.
• Familiarity with Threat Intelligence Platforms (TIPs) such as MISP, ThreatConnect, Anomali, and Recorded Future.
• Experience with SIEM/SOAR tools like Splunk and Palo Alto Cortex XSOAR.
• Knowledge of malware and sandbox analysis tools, including VirusTotal and Hybrid Analysis.
• Understanding of frameworks like the MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.
• Experience with OSINT and dark web tooling such as Maltego and Shodan.
• Familiarity with vulnerability and exposure data sources like CVE/NVD and CISA KEV catalog.
• Experience with program and reporting tools, including KPI dashboards and executive reporting templates.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here.