About the team

The Attacker Engineering team validates Stripe’s defenses and measures security controls by providing actionable attacker-derived products, datasets, and insights into real attacks. The team is distributed, working primarily across US time zones but will regularly coordinate with stakeholders in Europe and Asia.

• What you’ll do

We are seeking a skilled and motivated cyber intelligence professional who will conduct comprehensive research and analysis of cyber threat intelligence data from diverse sources. As part of our team, you will provide valuable insights and recommendations to support informed decision-making and effective risk mitigation strategies. Your ability to communicate complex cyber threat intelligence findings to non-technical stakeholders is crucial in ensuring its understanding and application. Collaborating with internal teams and external partners, you will play a vital role in enhancing security and staying ahead of emerging cyber threats. Your dedication to continuous improvement and alignment with organizational goals will contribute to the overall effectiveness of our intelligence operations. Join us in our mission to safeguard our organization and stakeholders from evolving cyber risks.

• Collaborate closely with relevant stakeholders, such as product teams, engineering teams, and business units, to understand their intelligence needs and requirements.
• Proactively identify and analyze potential cyber-related threats and risks to the organization by conducting comprehensive research and analysis using various intelligence sources and methodologies.
• Provide timely and actionable intelligence reports and briefings to key stakeholders, including executives, business leaders, and operational teams, supporting informed decision-making and risk mitigation strategies.
• Monitor and analyze threat intelligence feeds, open-source intelligence, social media platforms, trust groups, and other relevant sources to identify emerging cyber threats, attack trends, and potential threat actors.
• Conduct in-depth investigations and analyses of security incidents, data breaches, and cyber attacks to determine the nature, scope, and impact of the incidents and provide recommendations for response and remediation.
• Develop and maintain threat profiles and actor attribution information to enhance the organization's understanding of threat landscapes and potential adversaries.
• Collaborate with internal teams and external partners to share and exchange threat intelligence, improving collective defenses and response capabilities.
• Stay current with the latest trends, techniques, and tools in cyber threat intelligence and contribute to continuously improving intelligence practices and methodologies within the organization.
• Develop relationships with external intelligence providers, industry peers, and trusted communities to stay informed about emerging threats and share relevant intelligence.
• Participate in incident response activities, providing intelligence support to effectively detect, investigate, and respond to cyber incidents and contribute to post-incident analysis and lessons learned exercises.
• Who you are
• We’re looking for someone who meets the minimum requirements to be considered for the role. If you meet these requirements, you are encouraged to apply. The preferred qualifications are a bonus, not a requirement.
• 5+ years of experience in cyber threat intelligence or a related area
• Bachelor's degree in a relevant field, such as Cybersecurity, Computer Science, or a related discipline
• In-depth knowledge and understanding of the cyber threat landscape, attack vectors, and emerging trends in the field of cybersecurity
• Demonstrated experience collecting, analyzing, and interpreting intelligence from various sources, including open-source intelligence, threat feeds, social media, and underground forums
• Proficiency in utilizing intelligence analysis tools and technologies to process, visualize, and present data in a meaningful and actionable manner
• Strong understanding of intelligence methodologies, frameworks, and best practices, with the ability to apply them effectively in a practical setting
• Excellent written and verbal communication skills, with the ability to convey complex technical concepts to technical and non-technical stakeholders
• Proven ability to work collaboratively with cross-functional teams and stakeholders to identify intelligence requirements and provide timely and relevant intelligence support
• Familiarity with relevant industry standards and regulations about cyber threat intelligence and data privacy

Continuous learning mindset with a desire to stay up-to-date with the latest threats, intelligence techniques, and tools in the cybersecurity field