Skip to content

Threat Intel & Research

Threat Intelligence Specialist – EMEA

Kodex logoKodexRemote in IrelandFull-timePosted 2mo ago
Apply on Kodex (shows the role here)Kodex as an employer: salaries and roles

The full posting

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T.

By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.

The Role

We’re seeking a Threat Intelligence Specialist to strengthen identity assurance for law enforcement users across the EMEA region. The ideal candidate brings practical law enforcement experience, strong relationship-building skills, and a critical, logical, and analytical mindset for quickly assessing whether requesters are who they claim to be. As a key guardian of our platform’s integrity, you’ll investigate suspicious access attempts, escalate signs of impersonation or compromise, and help ensure our clients can trust every request they receive.

Key Responsibilities

  • Analyze data and information to identify confirmed relationships.
  • Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.Initiate communication with international government agencies across different time zones via calls and emails.
  • Establish and nurture relationships with law enforcement agencies and personnel worldwide.
  • Foster cross-departmental engagement and streamline workflows.
  • Respond promptly and efficiently to user needs.
  • Stay abreast of industry and market trends.

What you bring

  • Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
  • Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
  • Fluent in English
  • Exceptional verbal and written communication skills.
  • Ability to seamlessly operate across various time zones.
  • Self-starter with the ability to work autonomously.
  • Excellent interpersonal skills to engage with diverse management levels.

Nice to have

  • Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.
  • Technical Autonomy: Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs) without dependency on a specific commercial vendor platform.
  • Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.
  • Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
  • Sector Background: Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.
  • Language skills: Fluency in Czech and/or French and/or Arabic

Benefits

  • Remote-first within Ireland (Dublin-based preferred)
  • Occupational pension scheme with employer contributions
  • Statutory paid annual leave and public holidays
  • Competitive salary and meaningful equity
  • Annual offsites in exciting locations (past trips include Seattle, Miami, Nashville, and San Francisco)
  • Global impact that comes from being part of a team that facilitates critical operations for law enforcement worldwide
  • Dynamic environment defines this role, with work on impactful, high-priority matters and opportunities for professional growth

Equal Employment Opportunities at the Company

Kodex is committed to hiring talented and qualified individuals with diverse backgrounds for all of its tech, non-tech, and leadership roles. Kodex believes that the gathering and celebration of unique backgrounds, qualities, and cultures enriches the workplace.

Where you can be based

This position is 100% remote and open to applicants based in Ireland.

Text as Kodex published it; last compared with the original on 13 Nov 2026.

Apply on Kodex (shows the role here)

The application

Your details and CV, then 7 questions (2 written).

Keep these to handCVLinkedIn (optional)
  1. 1.
    Are you currently located in Ireland and do you currently have the legal right to work there without an employment permit or visa sponsorship?Yes or no
  2. 2.
    How many years of full-time experience do you have in threat intelligence, SOC analysis (tier 3+), incident response, trust & safety investigations, or a related intelligence field?Number
  3. 3.
    Describe a specific investigation where you had to make a decision under time pressure with incomplete information. What signals did you rely on, and how did you validate your conclusion?Written answer
  4. 4.
    Which of the following describe your professional background? Select all that apply.Choose one (8 choices)
  5. 5.
    What tools do you use most in your investigation workflow? (OSINT tools, custom scripts, platforms - actual names OK.)Written answer
  6. 6.
    Are you comfortable making autonomous identity verification decisions at pace, using your own judgment on when to escalate?Yes or no
  7. 7.
    This role provides coverage during EMEA business hours (roughly 9am-6pm GMT), with occasional flexibility for high-priority, time-sensitive investigations. Are you able to consistently work these hours?Yes or no

Taken from Kodex's application form as it stood on 13 Nov 2026.

The employer: Kodex

Runs a verified network through which companies answer law enforcement data requests; it is hiring four threat intelligence specialists and a security engineer.

Pay and benefits: Full-time remote staff roles, each hired within a set country or US time zone.

Full postings from Kodex All Kodex openings on the board Kodex employer profile

Other security roles worth a look

A few links on CyberJobs.cc are referral links: when one leads to a hire, a sign-up or a purchase (a lab, a course or a tool marked Partner), the company behind it may pay CyberJobs.cc a fee. You pay nothing extra, and it never changes the salary an employer offers you or which roles the board lists. Roles from partners who pay us a fee rank a little higher in this list.

Let security teams come to you

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Kodex posts a security role

We read Kodex's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.

Threat Intelligence Specialist – EMEA at Kodex | CyberJobs.cc