Threat Intel Manager, Influence Operations & Surveillance

Key Responsibilities

• Own strategy, priorities, and outcomes for the Influence Operations & Surveillance threat intel mission area
• Hire, manage, and develop a small team of technical threat investigators with IO and surveillance expertise
• Personally lead investigations into state-linked surveillance misuse including commercial spyware vendors and surveillance products whose end customers are authoritarian governments and AI-enabled influence campaigns
• Stand up the mission area's first automated detection: abuse signals, behavioral clustering, and coordinated-network detection tailored to information manipulation and surveillance tooling
• Conduct cross-platform analysis linking on-platform activity to broader campaigns across social media, messaging platforms, and the spyware supply chain
• Attribute campaigns to specific actors, with particular focus on state-sponsored operations from geopolitically significant regions
• Own external engagement: government partners, platform integrity teams, academic and civil-society researchers, and threat intelligence sharing communities
• Drive public and partner-facing reporting on AI-enabled IO and surveillance, and inform safety-by-design strategies as multimodal and agentic capabilities reshape the landscape

Minimum Qualifications

• Deep subject matter expertise in influence operations, coordinated inauthentic behavior, or state surveillance / commercial spyware ecosystems
• Led investigative teams or threat intel teams
• Demonstrated proficiency in SQL and Python for data analysis and threat detection
• Experience attributing campaigns to specific threat actors, including state-sponsored operations
• Strong OSINT tradecraft for investigating online information ecosystems
• Hands-on experience with large language models and how they can be weaponized for IO and surveillance
• Can present analytical work to technical and non-technical audiences, including government stakeholders and senior leadership

Preferred Qualifications

• Experience at a major technology platform on influence operations, platform integrity, or content authenticity
• Background in intelligence analysis, information operations, or counter-disinformation in government or military contexts
• Experience investigating commercial spyware or surveillance-as-a-service vendors (e.g., civil-society or vendor-research backgrounds)
• Experience investigating operations linked to Chinese, Russian, Iranian, or other state-sponsored campaigns
• Fluency in Mandarin Chinese, Russian, Farsi, and/or Arabic with nuanced regional and geopolitical context
• Familiarity with social network analysis for mapping coordinated behavior
• Active Top Secret security clearance

Education and Experience

• Minimum education: Bachelor’s degree or an equivalent combination of education, training, and/or experience
• Required field of study: A field relevant to the role as demonstrated through coursework, training, or professional experience
• Minimum years of experience: Years of experience required will correlate with the internal job level requirements for the position