Manager, Threat Intelligence

Leads threat intelligence for PDI Technologies' managed security services, heading a remote team of four analysts, hunters and detection engineers and doing hands-on hunting, intelligence writing and detection work alongside them. The team serves retail, hospitality and payments customers and works closely with the SOC, Incident Response and Security Engineering leaders.

The manager sets intelligence requirements with SOC leadership and customers and runs the full intelligence cycle, producing actor profiles, campaign analyses, industry threat briefs and customer-specific reports focused on financially motivated groups, payment fraud operations and ransomware crews that target retail. The role owns detection content strategy across SIEM and EDR/XDR, measuring coverage against MITRE ATT&CK, runs hypothesis-led hunts across customer environments and turns what they uncover into new detections, and uses automation and AI for enrichment and reporting. During major incidents the manager supplies intelligence context and leads complex escalations, and briefs customers at technical and executive levels. Early goals include an ATT&CK coverage baseline and a regular rhythm of industry threat reporting.

PDI wants eight or more years across threat intelligence, hunting, incident response, detection engineering or security operations, at least three of them managing technical teams, strong command of frameworks such as ATT&CK and the Diamond Model, experience writing finished intelligence, and hands-on SIEM and EDR query skills; the environment uses FortiSIEM. The role is remote in the US.