Threat Intelligence Lead - Build Next-Gen SaaS Security

Obsidiansecurity; Palo Alto (CA); On-site; USD 240,000 - 280,000; Full time

Benefits offered by this job

Annual conference budget

Equity

Health benefits

Job summary

Obsidian Security is seeking a Threat Intelligence Lead to build and scale our threat intel program. You will transform noisy reports into prioritized, actionable intelligence for product and corporate security, and drive hunts across cloud, SaaS, and endpoints.

The role requires deep technical skills, ownership mindset, and the ability to deliver high-impact threat intelligence in a fast-growing startup.

Qualifications

• 6+ years in threat intelligence, threat hunting, detection engineering, incident response, or security operations.
• Ability to translate threat data into prioritized, actionable assessments for varied audiences.
• Hands-on threat hunting across cloud, SaaS, and endpoint telemetry with MITRE ATT&CK fluency.
• Fluency in MITRE ATT&CK and the intelligence lifecycle.
• Experience with SIEM query languages and Python scripting.
• Familiarity with intelligence sharing standards and tooling (STIX/TAXII, MISP, OpenCTI).

Responsibilities

• Collect, correlate, and synthesize threat intelligence into a single coherent picture.
• Produce timely, decision-grade intelligence for technical teams and leadership.
• Own the intelligence requirements process and drive collection against it.
• Run structured threat hunts across corporate and product environments.
• Write and tune detections and support incident investigations.

Skills

Threat intelligence

Threat hunting

MITRE ATT&CK

Python scripting

Cloud/SaaS/endpoint telemetry

Incident response

Tools

STIX/TAXII

MISP

OpenCTI

Okta

Google Workspace

Salesforce

Jira

Job description

Obsidian Security is seeking a Threat Intelligence Lead to build and scale our threat intel program. You will transform noisy reports into prioritized, actionable intelligence for product and corporate security, and drive hunts across cloud, SaaS, and endpoints.

The role requires deep technical skills, ownership mindset, and the ability to deliver high-impact threat intelligence in a fast-growing startup.