Cyber Intelligence Manager
Open a video or resource link, watch it, then check its box to track your progress and unlock what comes next.
- Frame intelligence questions and analyze adversaries with repeatable tradecraft
- Operationalize intelligence through sharing, enrichment and threat-informed defense
- Lead an intelligence program with machine-speed workflows and executive impact
Benchmark: Google Threat Intelligence Group leadership + strategic intelligence reporting + Mandiant CTI program design signals (current Sep 2026) Market refresh: priority intelligence requirements; finished intelligence; actor/TTP tracking; structured analytic techniques; threat hunting and detection handoff; intelligence sharing; AI-assisted reporting; executive briefings; program metrics; team/resource leadership.
Search Live Openings
We don’t have a direct job-board feed matched to this one yet, so here are real, live US job searches for “Cyber Intelligence Manager” instead.
Frame intelligence questions and analyze adversaries with repeatable tradecraft
Intelligence requirements, lifecycle + organizational threat profile
Coverage: CTI / Risk / Stakeholder Discovery / Intelligence Lifecycle
Adversary models, ATT&CK + structured analytic tradecraft
Coverage: MITRE ATT&CK / Threat Modeling / OSINT / Intelligence Analysis
Operationalize intelligence through sharing, enrichment and threat-informed defense
Collection, enrichment + interoperable intelligence sharing
Coverage: MISP / STIX-TAXII / IOC Enrichment / TIP Operations
Threat hunting, detection engineering + defensive feedback loops
Coverage: Threat Hunting / Detection / SOC / Incident Response
Lead an intelligence program with machine-speed workflows and executive impact
Program maturity, automation + AI-assisted intelligence production
Coverage: CTI-CMM / AI Workflows / Automation / Quality & Confidence
Leadership, intelligence products + executive decision support
Coverage: Program Leadership / Metrics / Finished Intelligence / Briefing
Role-Readiness Proof / Capstone
Build a cyber intelligence operating system for an enterprise: define stakeholders, priority intelligence requirements and a threat profile; create a collection plan with source reliability and confidence rules; model priority actors, campaigns and TTPs in ATT&CK; ingest and enrich indicators through MISP/STIX-TAXII; connect intelligence to hunting and detection engineering; define finished-intelligence products for SOC, security leaders and executives; add AI-assisted summarization and trend workflows with human validation; and establish operating cadence, metrics, escalation paths and feedback loops.
Proof Rubric
- Show that intelligence is requirements-driven rather than feed-driven
- distinguish evidence from assessment
- document source reliability, analytic confidence and assumptions
- map adversary behavior consistently
- make intelligence interoperable and actionable for defenders
- measure time-to-insight, stakeholder use and detection impact
- automate repetitive work without hiding uncertainty
- brief technical and executive audiences clearly
- and demonstrate how feedback changes future collection and analysis