Threat Intelligence Specialist (LATAM Region) - Kodex

We're seeking a Threat Intelligence Specialist to spearhead our efforts in enhancing law enforcement operations across the LATAM Region. The ideal candidate will possess practical experience in law enforcement, adept relationship-building skills, and the ability to swiftly address threat detections with a critical, logical, and analytical mindset.

As a key guardian of our platform's security, you'll play a vital role in ensuring the safety of our clients and their end-users, enriching their experience in ways that are indispensable.

Responsibilities

• Analyze data and information to identify confirmed relationships.
• Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.
• Initiate communication with international government agencies across different time zones via calls and emails.
• Establish and nurture relationships with law enforcement agencies and personnel worldwide.
• Foster cross-departmental engagement and streamline workflows.
• Respond promptly and efficiently to user needs.
• Stay abreast of industry and market trends.

Requirements

• Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
• Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
• Fluent in English, plus Brazilian Portuguese or Spanish; proficiency in all 3 is strongly desired.
• Exceptional verbal and written communication skills.
• Ability to seamlessly operate across various time zones.
• Self-starter with the ability to work autonomously.
• Excellent interpersonal skills to engage with diverse management levels.

Preferred Qualifications

• Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.
• Technical Autonomy: Expertise in network and host-based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs) without dependency on a specific commercial vendor platform.
• Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.
• Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
• Sector Background: Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.