• Lead and mentor a team of threat intelligence and detection engineers. • Develop and maintain the organization’s threat intelligence program, ensuring intelligence directly informs detection and response priorities. • Establish and maintain intelligence-sharing partnerships (e.g., ISACs, government agencies, peer organizations). • Define and track KPIs to measure the effectiveness of threat hunting and detection engineering programs. • Conduct proactive threat hunts leveraging intelligence on emerging adversary behaviors (MITRE ATT&CK-aligned). • Develop, test, and tune detections across SIEM, EDR, and cloud security platforms (e.g., Microsoft Sentinel, Splunk, Defender, CrowdStrike). • Collaborate with incident response and SOC teams to validate detections and improve coverage gaps. • Use automation and scripting (e.g., Python, KQL, PowerShell) to enhance hunting and detection efficiency. • Identify, access, collect data and other threat intelligence for dark web sources. • Review cybercrime forums/marketplaces and other platforms to determine their potential as ongoing collection targets.