Lead Cyber Threat Intelligence Data Architect

This is a fully remote position, open to applicants in District of Columbia, +4 more states.

📋 Description

• Oversee the administration, configuration, and strategic direction of Anomali ThreatStream.

• Manage integrations, threat intelligence feeds, data quality, and the governance of the platform.

• Provide guidance to CTI analysts and stakeholder teams on the structure, integration, and delivery of threat intelligence data.

• Establish and refine standards, methodologies, and best practices for structuring, maintaining, and delivering cyber threat intelligence.

• Design and uphold a consistent, searchable, and reusable organization of threat intelligence for analysts, AI agents, and automated systems.

• Create workflows and pipelines that transform analytical efforts into structured intelligence records.

• Maintain technical relationships with stakeholders utilizing CTI data via AI agents, automated systems, and other tools.

• Oversee API access, data versioning, and analytics related to downstream CTI data usage.

• Identify the intelligence needs of stakeholder AI and automation workflows, ensuring data is accessible in a usable format.

• Enhance tools, workflows, and processes that support security operations, detection engineering, and vulnerability management.

• Manage the collection plan and align sources with intelligence requirements and the information needs of stakeholders.

• Assess the quality, timeliness, and value of sources.

• Drive continuous improvement and establish standards across stakeholders.

⛳️ Requirements

• A minimum of 7 years of relevant experience in cyber threat intelligence, security data platforms, or intelligence infrastructure.

• Proven experience leading projects or functional initiatives.

• Understanding of how AI and automated systems utilize structured data.

• Ability to organize threat intelligence for both analysts and AI-driven tools.

• Bachelor's degree or equivalent experience is required.

• Strong knowledge of CTI workflows, collection management, and intelligence requirements.

• Demonstrated intellectual curiosity and adaptability.

• Solid understanding of the cyber threat landscape.

• Experience with administering a threat intelligence platform, preferably Anomali ThreatStream.

• Proficiency in structuring threat intelligence data and designing schemas.

• Experience in building API-based integrations.

• Capability to independently manage a technical function and promote standards across stakeholders.

• Familiarity with MITRE ATT&CK, STIX/TAXII, and other structured intelligence frameworks is preferred.

• Experience integrating threat intelligence with detection engineering, SOC, or vulnerability management workflows is preferred.

• A dedicated workspace free from ongoing interruptions to safeguard member PHI/HIPAA information.

• Home internet service with a minimum of 25 Mbps download and 10 Mbps upload is required.

🏝️ Benefits

• Bonus incentive plan based on individual and/or company performance.

• Medical benefits.

• Dental benefits.

• Vision benefits.

• 401(k) retirement savings plan.

• Paid time off.

• Company holidays.

• Personal holidays.

• Paid parental leave.

• Paid caregiver leave.

• Short-term disability.

• Long-term disability.

• Life insurance.

• Self-provided home internet service, with a minimum of 25 Mbps download and 10 Mbps upload required.

• Remote work arrangement.

• Occasional training and meetings at Humana offices may be necessary.