Synced from Ashby · Sep 18

Threat Intelligence Specialist

KodexUS - Remote (EST only)Posted Sep 18, 2026
Security AnalystRemoteMid
Apply nowSave & get alerts

Mirrored from Kodex's own Ashby careers system · refreshed hourly

6
Other open Kodex roles
Sep 18
Posted
Ashby
Applicant system
Job description

About the company
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T.

By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.

Position Overview

We're seeking a Threat Intelligence Specialist to spearhead our efforts in enhancing law enforcement operations across the LATAM Region. The ideal candidate will possess practical experience in law enforcement, adept relationship-building skills, and the ability to swiftly address threat detections with a critical, logical, and analytical mindset. As a key guardian of our platform's security, you'll play a vital role in ensuring the safety of our clients and their end-users, enriching their experience in ways that are indispensable.

Responsibilities

  • Analyze data and information to identify confirmed relationships.

  • Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.

  • Initiate communication with international government agencies across different time zones via calls and emails.

  • Establish and nurture relationships with law enforcement agencies and personnel worldwide.

  • Foster cross-departmental engagement and streamline workflows.

  • Respond promptly and efficiently to user needs.

  • Stay abreast of industry and market trends.

Requirements

  • Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.

  • Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).

  • Fluent in English, plus Brazilian Portuguese or Spanish; proficiency in all 3 is strongly desired.

  • Exceptional verbal and written communication skills.

  • Ability to seamlessly operate across various time zones.

  • Self-starter with the ability to work autonomously.

  • Excellent interpersonal skills to engage with diverse management levels.

Preferred Qualifications

  • Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.

  • Technical Autonomy: Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs) without dependency on a specific commercial vendor platform.

  • Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.

  • Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).

  • Sector Background: Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.

Benefits

  • Remote-first within the U.S.

  • Annual offsites in exciting locations. Past trips include Seattle, Miami, Nashville, and San Francisco

  • Competitive salary and meaningful equity

  • Unlimited Vacation + 14 company holidays

  • 12 weeks of fully paid parental leave, with a flexible return-to-work policy

  • Comprehensive medical, dental, and vision plans

  • 401(k) retirement plan

  • Dynamic Environment: Work on impactful, high-priority matters with opportunities for professional growth.

Applicants must be currently authorized to work in the United States on a full-time basis. We are unable to sponsor or transfer employment visa sponsorship for this position.

Equal Employment Opportunities at the Company

Kodex is committed to hiring talented and qualified individuals with diverse backgrounds for all of its tech, non-tech, and leadership roles. Kodex believes that the gathering and celebration of unique backgrounds, qualities, and cultures enriches the workplace.

View original posting on Ashby

What applying to Kodex usually looks like

Based on publicly available information, candidates applying through ashby can generally expect a structured online application process, often beginning with a resume and application form submission followed by an automated confirmation email. Kodex's openings across account-executive, customer-success-manager, product-manager, and security-analyst roles may involve an initial recruiter screen, followed by additional stages that can include hiring manager conversations, skills-based assessments, or panel discussions relevant to the role. Ashby-powered processes commonly allow candidates to track application status through a candidate portal, and communication may occur via email or an integrated scheduling tool. Response times vary depending on team bandwidth and role seniority, so candidates should not assume a fixed timeline. It is typically advisable to prepare role-specific examples, tailor application materials carefully, and follow up politely if no update is received within a reasonable window.

Based on publicly available information. LandEarly does not verify interview process details.

Land this one early - before the req fills.

LandEarly tailors your resume and screening answers to each posting, submits within minutes of a role going live, and tracks every application in one place.

Set up in minutes · Cancel anytime · No contract

Keep exploring

What this role pays, where else it is open, and how to write the application.

Threat Intelligence Specialist
Kodex · US - Remote (EST only)
Apply