Threat Intelligence Research Team Lead- CTI

At Dream, we redefine cyber defense vision by combining AI and human expertise to create products that protect nations and critical infrastructure. This is more than a job; It’s a Dream job. Dream is where we tackle real-world challenges, redefine AI and security, and make the digital world safer. Let’s build something extraordinary together.

Dream's AI cybersecurity platform applies a new, out-of-the-ordinary, multi-layered approach, covering endless and evolving security challenges across the entire infrastructure of the most critical and sensitive networks. Central to our Dream's proprietary Cyber Language Models are innovative technologies that provide contextual intelligence for the future of cybersecurity.

At Dream, our talented team, driven by passion, expertise, and innovative minds, inspires us daily. We are not just dreamers, we are dream-makers.

The Dream Job:

We are on an expedition to find you, someone who is passionate about turning research into reliable, production-grade capabilities. You'll lead the CTI research team, and play a major role in building and shaping our next-gen CTI platform across attribution, pivoting, infrastructure prediction, EASM, and the STIX/OpenCTI knowledge base.

The Dream-Maker Responsibilities:

• Set CTI research strategy across attribution, infra prediction, EASM, and KB.
• Hire, mentor, and grow a multidisciplinary research team.
• Establish graph-pivoting, attribution, and temporal/link modeling standards.
• Own EASM ROE and safe probing; prioritize high-signal exposures.
• Govern STIX/OpenCTI KB: taxonomy, connectors, provenance, data quality.
• Partner with AI/Platform to productionize scanners, enrichments, and agentic flows.
• Define KPIs (coverage, lead-time, precision/recall, FPR); run improvements.
• Deliver watchlists and briefings; support priority investigations and exec updates.
  
  

• 7–10 years CTI/EASM/offensive research; 2-4 years leading researchers.
• Deep DNS/BGP/ASNs, TLS/PKI/CT logs, cloud/hosting patterns expertise.
• Strong graph/temporal modeling: communities, embeddings, survival/Hawkes.
• EASM proficiency: passive discovery, safe active probing, evidence discipline.
• STIX 2.1, ATT&CK, TAXII; OpenCTI/MISP; ontology design and validation.
• Python; Neo4j/Elasticsearch; Kafka/SQS/Redis; Docker/Kubernetes.
• LLM-assisted extraction and agentic workflows with guardrails and evaluations.
• Clear communication; rigorous ethics, audibility, and stakeholder alignment.