
Senior Manager, Adversary Research
Posted 2 days ago

Posted 2 days ago
This is a fully remote position, open to applicants in United States.
• Formulate the strategy, priorities, and operational framework for the Adversary Research team.
• Mentor, coach, and enhance the skills of threat researchers, intelligence analysts, and technical experts.
• Oversee investigations into nation-state actors, cybercriminal enterprises, ransomware activities, malware operations, and innovative adversary techniques.
• Supervise proactive hunting across extensive telemetry to uncover unidentified campaigns, infrastructure, malware, and behavioral trends.
• Set standards for actor tracking, campaign clustering, attribution, analytical confidence, and intelligence generation.
• Direct malware analysis, threat hunting, infrastructure tracking, and the development of YARA, Sigma, behavioral detections, and research tools.
• Collaborate with threat hunting, incident response, detection engineering, security operations, product, and vulnerability research teams.
• Lead tactical, operational, and strategic intelligence creation for technical, executive, customer, and public audiences.
• Provide briefings to senior leaders and customers regarding emerging threats, adversary activities, and research findings.
• Cultivate relationships with industry colleagues, government partners, intelligence-sharing communities, and external researchers.
• Report directly to the Director, Adversary Operations.
• A minimum of 12 years of experience in cyber threat intelligence, adversary research, threat hunting, malware analysis, incident response, or a related field.
• At least three years of experience in leadership roles, managing research initiatives, or multidisciplinary technical teams.
• Proven success in establishing or advancing a threat intelligence, adversary research, or similar security function.
• Extensive knowledge of the intelligence lifecycle, intelligence needs, collection management, all-source analysis, and structured analytic methodologies.
• Strong understanding of nation-state, cybercriminal, ransomware, initial access, and malware ecosystems.
• Proficient in analyzing data from endpoints, networks, cloud environments, identity, infrastructure, malware, and open-source sources.
• Familiarity with MITRE ATT&CK and the Diamond Model.
• Experience in converting threat intelligence into detections, hunting strategies, incident response measures, defensive controls, or product enhancements.
• Knowledge of YARA, Sigma, SIEM, EDR, SOAR, threat intelligence platforms, and large-scale data analysis environments.
• Exceptional written and verbal communication abilities, including presentations to both technical and executive audiences.
• Demonstrated experience in authoring, reviewing, and guiding publication-quality threat research.
• Sound judgment in managing sensitive intelligence, uncertain attribution, customer information, and high-stakes security events.
• Preferred: experience in managing senior researchers; expertise in reverse-engineering tools such as IDA Pro, Ghidra, or x64dbg; proficiency in Python, SQL, or similar programming languages; experience with actor-tracking programs, campaign repositories, intelligence requirements, or research metrics; involvement in high-severity incident response or proactive threat-hunting efforts; publications of original security research or presenting at industry conferences; awareness of geopolitical dynamics influencing state-directed cyber operations.
• Equity for all employees.
• Flexible time off and paid volunteer days.
• 401(k) contribution and matching.
• Training and career development programs.
• Comprehensive private benefits plan including medical, mental health, dental, disability, life and AD&D, and value-added services.
• Robust Employee Assistance Program (EAP) offering mental health services.
• Fertility support and paid parental leave.
• Variable incentive compensation.
• New hire equity grants.
Tenet Healthcare
Get handpicked remote jobs straight to your inbox weekly.