Threat Intelligence Manager

Purpose
Provide strategic and operational leadership for 24/7 security operations, improving processes, implementing new capabilities, and delivering high-quality managed security services to support business growth and long-term client retention.

Key Responsibilities

• Lead and manage 24x7x365 Managed Security Services (MSS) operations, ensuring reliability, performance, and SLA compliance.
• Enforce adherence to operational policies, procedures, escalation paths, and governance frameworks.
• Oversee shift operations, workforce scheduling, handovers, and escalation of critical incidents (P1/P2).
• Direct Threat Intelligence and Threat Hunting functions, identifying emerging threats, zero-day vulnerabilities, attack campaigns, and malware activity.
• Produce operational, tactical, and incident-based intelligence reports.
• Guide cyber threat research, proactive hunting, and incident investigations across multiple clients.
• Conduct malware analysis, identify indicators of compromise (IOCs), and coordinate brand protection and takedown actions.
• Drive service management practices, including availability, capacity, risk, continuity, change, configuration, and service-level management.
• Lead incident, problem, access, asset, and client support management processes.
• Collaborate with stakeholders to enhance workflows, documentation, standards, and overall service maturity.
• Build and develop team capabilities through performance management, training, succession planning, and mentorship.
• Ensure effective knowledge management, process compliance, and continuous service improvement.
• Represent the organization professionally in client-facing and internal engagements.

Qualifications

Education
Bachelor’s degree in IT, Computer Science, Computer/Electronics Engineering, or a related field.

Experience
Minimum 5 years in a 24x7x365 Security Operations Center with proven expertise in Managed Security Services, incident response, threat intelligence, and threat hunting.

Certifications / Training (minimum two required)

• IT Service Management
• IT Infrastructure (Networking, Servers, Cloud)
• Cybersecurity / Information Security
• Threat Intelligence (e.g., CTIA, GCTI, CCTIA, eCTHPv2, OSINT-focused training)

Core Competencies

• Advanced knowledge of cybersecurity concepts, threat landscapes, vulnerabilities, and risk management
• Networking, systems administration, and security architecture
• Incident response frameworks (MITRE ATT&CK, NIST SP 800-61)
• ITIL practices, OS, networking fundamentals, and cybersecurity principles