CTI Lead

We're Vega! One of the fastest growing start-ups in Cybersecurity - redefining the limits of Security Analytics and Operations.

We've raised a $65M Series A from Cyberstarts, Accel, Redpoint and CRV, to build a platform that will become the new AI-Native operating system for the SOC. We're already making a huge impact on some of the world's largest companies - improving their detection, unlocking their data and saving them money. Want to join us and be a part of the journey? This is your chance!

We're looking for a Cyber Threat Intel Lead to oversee the creation of actionable intelligence, from building threat actor profiles and their tactics to developing threat hunting content, helping clients stay ahead of emerging and existing threats. In this role, you’ll shape Vega’s Threat Intelligence Hub, collaborate with product, AI, and detection teams, and work directly with clients.

WHAT YOU WILL DO

• Monitor emerging threat intelligence news, campaigns, CVEs, and evolving TTPs to surface high-priority developments and produce timely intelligence briefings for Vega clients.
• Map threat group activities, TTPs, and modus operandi, and create comprehensive threat actor profiles within Vega’s platform.
• Develop dedicated threat hunting notebooks and guidance to empower clients’ proactive investigations.
• Collaborate with the product and AI teams to design, shape, and enhance Vega’s Threat Intelligence Hub capabilities.
• Support pre-sales engagements by presenting Vega’s threat intelligence capabilities to prospects and clients, and contribute to discussions on client-specific TI needs.
• Partner with Vega clients to improve intelligence content relevance, address satisfaction drivers, and identify areas for innovation in the TI domain.
• Collaborate with the Detection Engineering team to ensure detection logics align with intelligence findings.
• Research, evaluate, and assess external TI vendors, supporting the product team in defining and prioritizing integration opportunities.
• Contribute to technical marketing by writing blogs, intelligence briefings, and potentially submitting content to industry conferences.

WHAT YOU WILL BRING

• At least 8 years of experience in the cybersecurity industry, with a minimum of 4 years dedicated to threat intelligence.
• Extensive knowledge of threat groups, actor profiles, modus operandi, and attack campaigns.
• Deep understanding of detection and response practices, as well as threat hunting methodologies.
• Strong expertise in attack vectors and common exploitation techniques.
• Solid understanding of data visibility concepts, log collection, and auditing practices.
• Hands-on experience with query languages such as KQL; familiarity with other query or scripting languages is a plus.
• Familiarity with common industry tools such as MISP, OpenCTI, Shodan, and others.
• Proven experience in client-facing roles, including presenting to and collaborating with clients.
• Excellent English proficiency – verbal and written.
• Willingness to travel for client engagements.
• Highly organized, methodical, and responsible, with the ability to deliver under short timelines