Threat Intelligence Manager

Role Summary

To Enhance Flavor

Experience in fintech environments, digital banks, payment processors or technology companies with relevant exposure to financial fraud.

Experience with dark web monitoring, commercial intelligence sources and financial sector sharing communities.

Experience in connecting Threat Intelligence to anti-fraud rules, detections, vulnerability management and executive decisions.

Knowledge of Grandoreiro, Mekotio, Guildma or other families of financial malware.

Experience with building an intelligence function or program from scratch.

We are looking for a person who is passionate about technology, who is always looking for new learning and who enjoys challenges. If you identify with this profile, we would love to meet you!

Responsibilities

Your Daily Menu

• Design, build and lead the Cyber Threat Intelligence function from the beginning, establishing strategy, operating model, metrics and roadmap for a complete strategic, operational and tactical intelligence program.
• Define and implement collection plans, prioritization frameworks and dissemination flows that deliver actionable intelligence to the Incident Response and Fraud Prevention teams.
• Lead, develop and quickly integrate a team of Threat Intelligence professionals, promoting analytical rigor, continuous learning and cross-functional collaboration.
• Balance team autonomy with alignment with the organization's security objectives.
• Act as the main Threat Intelligence interface with stakeholders across the organization, translating complex threat scenarios into clear, decision-oriented briefings for technical teams, business leaders and executives.
• Establish intelligence sharing relationships with industry peers, ISACs, law enforcement and trusted partners.
• Evaluate, select and manage Threat Intelligence platforms, tools and data sources, building a scalable technological stack for collection, enrichment, analysis and dissemination.
• Define KPIs and success metrics to demonstrate program return, including reduced incident response time, improved fraud detection, and proactive threat mitigation.
• Drive continuous improvement of intelligence processes, keeping methodologies updated in the face of new threats, technologies and business priorities.
• Collaborate with Security Operations, Fraud Prevention, Risk Management and Engineering leadership to incorporate intelligence into detection engineering, vulnerability management and anti-fraud rules development.
• Manage budget, suppliers and resource planning, ensuring the function operates efficiently and scales with business growth and evolving threat exposure.

Requirements

Ingredients We Look For

• In-depth knowledge of the entire intelligence cycle: targeting, collection, processing, analysis, dissemination and feedback.
• Proven experience in building and operating intelligence programs in technology or financial services companies.
• Solid knowledge of the financial threat landscape, including banking trojans, families such as Grandoreiro and Carbanak, account takeover, payment fraud schemes, carding ecosystems, money mule networks and business email compromise campaigns.
• Proven experience in leading and developing technical teams, with the ability to guide analysts at different levels, delegate responsibilities and create an environment of analytical rigor and intellectual curiosity.
• Mastery of Threat Intelligence frameworks and methodologies, including Diamond Model, MITER ATT&CK, Cyber Kill Chain and structured analysis techniques.
• Excellent communication and stakeholder management, including presentation to executives, facilitation of cross-functional groups and translation of technical intelligence into business-relevant narratives.
• Working knowledge of collection techniques, including OSINT, threat feed management and network telemetry analysis.
• Familiarity with TIPs, SIEM/SOAR integrations, and automation pipelines for security event intelligence and enrichment operations.
• Knowledge of Incident Response flows and fraud investigations, connecting intelligence requirements to operational use cases.
• Experience with supplier and budget management, including evaluating services, negotiating contracts and building business cases for tools and headcount.
• Working knowledge of banking and payments architectures, regulatory compliance, and threat vectors specific to digital financial platforms.

About the Company

Our Way of Doing in the Team

Transform your career with iFood! We are a Brazilian technology company that is a reference in Latin America. Through innovative solutions, we connect thousands of restaurants to millions of consumers daily with an average of 100 million orders per month. In addition to food delivery, we are also a Market, Pharmacy and Pet. We also have iFood Pago, our Fintech, which encompasses iFood Benefits, the iFood food and meal voucher and iFood Pago itself, the restaurant's bank. Join us and be part of a team that is always ahead with cutting-edge technology and constant innovation.