• Lead and mentor a small, embedded intelligence team, setting daily/weekly priorities, delegating tasks, and ensuring consistent, high-quality delivery. • Partner with security stakeholders to define key intelligence requirements and maintain a clear tasking and escalation framework for routine reporting, RFIs, and incident-driven support. • Oversee all-source monitoring and analysis to identify emerging threats, security incidents, reputational risks, and trends. • Produce and quality-assure concise, actionable intelligence products and verbal briefings designed to inform operational and leadership decision-making. • Maintain and continuously improve SOPs, definitions, and analyst workflows for monitoring, incident response support, and reporting; identify gaps and redundancies and propose improvements. • Personally contribute to complex intelligence assessments and high-visibility stakeholder requests as required.

• Support intelligence efforts for global operations, travel security, data center security, executive protection, and market expansion initiatives. • Monitor and assess global events including armed conflict, terrorism, political instability, sanctions, civil unrest, organized crime, regional escalation, and infrastructure disruption, translating developments into actionable business risk assessments. • Produce strategic, operational, and tactical intelligence products including forecasts, executive briefings, travel risk assessments, crisis updates, heat maps, geospatial overlays, dashboards, and early warning alerts. • Help build, integrate, and maintain intelligence collection pipelines using open-source intelligence, commercial intelligence feeds, geospatial data, proprietary sources, and third-party intelligence platforms. • Continually improve intelligence workflows, alerting mechanisms, and analytical tooling. • Partner cross-functionally with Global Security, Legal, Supply Chain, Strategy, Infrastructure, and business teams to operationalize intelligence and support risk-informed decision making. • Conduct post-incident analysis and lessons-learned reviews following geopolitical events, operational disruptions, or security incidents. • Contribute to best practices, technical standards, and scalable processes for geopolitical and operational threat intelligence. • Support relationships with external intelligence vendors, industry peers, academic institutions, and government or law enforcement partners, where appropriate. • Share domain knowledge, and contribute to continuous improvement of the team.

Role Description The Cyber Intelligence Analyst participates in the identification, tracking, monitoring, containment, and mitigation of information security threats. He/She performs analysis of endpoint and network data utilizing established processes and tools to perform threat identification, analysis, containment, and remediation. This position is responsible for the documentation of security events and their resolution. The Cyber Intelligence Analyst communicates with and educates clients and asset owners to ensure understanding of processes and procedures, complex security topics and protocols, and risk resolution methodologies. The Cyber Intelligence Analyst will be required to provide support on a rotating basis. Qualifications - Experience as Security Operations Center (SOC) Analyst or relevant Cyber Security focused incident response and handling roles - Experience in Malware Reverse Engineering and Sandboxing - Experience with SIEM Technology - Significant experience with Linux, TCP/IP, UNIX, MS-Windows, IP Routing, Firewalls and IPS - Understanding of behavioral based threat models, including ATT&CK, Cyber Kill Chain, Diamond Model, etc. - Deep understanding of advanced cyber threats targeting enterprises, along with the tools, tactics, and procedures used by those threats - Demonstrated experience using Open Source (OllyDbg, Radare, GDB, etc.) malware analysis tools - Ability to analyze shellcode, and packed and obfuscated code, and their associated algorithms - Ability to develop network and host-based signatures to identify specific malware. Recommend heuristic or anomaly-based detection methods - Subject matter expertise in the detection, analysis and mitigation of malware - Experience with Information Security Research, Malware Reverse Engineering, Cyber Threat Analysis, Windows Operating System and Data Analysis - Knowledge of Research skills, Technical Writing, Information Security Research, Security Incident Response, Security Risk Assessment/Analysis - Bachelors degree or other college equivalent is preferred - Incident response focused certifications such as GIAC GSEC (401), GCIH (504), GMON (511) or equivalent knowledge level preferred - Public cloud (AWS, Azure, GCP) certifications are preferred Requirements - Must be a U.S. Citizen or National of the U.S., an alien lawfully admitted for permanent residence, or an alien authorized to work in the U.S. for this employer Benefits - Medical/prescription drug coverage - Dental coverage - Vision coverage - Flexible Spending Account - Health Savings Account - Dependent Care Flexible Spending Account - Basic and Supplemental Life Insurance & Accidental Death and Dismemberment - Disability Income Protection Plan - Employee Assistance Program - 401(k) retirement program - Vacation - Paid Holidays and Personal time - Paid Sick and Family and Medical Leave time as required by law - Discounted Employee Stock Purchase Program

• Serve as a point of contact for law enforcement inquiries, including as the DRI for law enforcement requests from Brazil, providing technical assistance and records in alignment with legal and compliance guidelines. • Evaluate, process, and fulfill legal information requests (e.g., subpoenas) in a timely manner, determining any risks or sensitivities associated with each request. • Conduct blockchain analysis using investigative tools such as Chainalysis, TRM Labs, and Elliptic to trace illicit fund flows and identify criminal typologies. • Pursue investigations into criminal activity with oversight from senior investigators, building cases from limited initial indicators and escalating urgent or sensitive matters to management. • Remain up to date on relevant laws, policies, and evolving financial crime typologies across the cryptocurrency ecosystem.