Threat Intelligence Lead (Remote)

📋 Description

• • Lead complex investigations involving data exfiltration, insider threat activity, and misuse of enterprise systems to protect sensitive aerospace technologies and national security programs.
• • Validate and triage alerts from DLP, SIEM, and UEBA; reconstruct user activity and data movement to establish intent, scope, and impact while ensuring chain-of-custody and legal defensibility.
• • Partner with Cybersecurity (SOC), HR, Legal, Compliance, and IT to coordinate investigative actions and response strategies, applying OSINT and behavioral analytics to proactively identify insider threat indicators.
• • Produce clear, concise investigative reports and intelligence briefings for technical and non-technical audiences, translating complex findings into actionable recommendations for risk mitigation and control enhancements.
• • About the team or company: At RTX, the world’s largest aerospace and defense company, 185,000 great minds are united by purpose to solve the world’s most complex problems. Pratt & Whitney, a world leader in aircraft engines and auxiliary power systems for over 100 years, hosts the Global Security Services (GSS) Threat Intelligence Lead role within its Threat Management and Intelligence program.
• • What the person can learn or achieve in this role: Develop expertise in cyber investigations, digital forensics, and insider threat detection while gaining access to advanced investigative tools, enterprise-scale systems, and classified environment operations; contribute to program evolution through process improvements, tool optimization, and policy enhancements with high visibility across cross-functional teams.