Skip to content

Threat Intel & Research

Threat Intelligence Specialist - LATAM

Kodex logoKodex$70,000–$110,000/yrRemote in United StatesFull-timePosted 1mo ago
Apply on Kodex (shows the role here)Kodex as an employer: salaries and roles

At its midpoint, $90k/yr, this role pays less than the $170k/yr midpoint for Threat Intelligence & Security Research openings today (usual band $148k–$248k/yr).

The full posting

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T.

By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.

Position Overview

We’re seeking a Threat Intelligence Specialist to strengthen identity assurance for law enforcement users across the LATAM region. The ideal candidate brings practical law enforcement experience, strong relationship-building skills, and a critical, logical, and analytical mindset for quickly assessing whether requesters are who they claim to be. As a key guardian of our platform’s integrity, you’ll investigate suspicious access attempts, escalate signs of impersonation or compromise, and help ensure our clients can trust every request they receive.

Responsibilities

  • Analyze data and information to identify confirmed relationships.
  • Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.
  • Initiate communication with international government agencies across different time zones via calls and emails.
  • Establish and nurture relationships with law enforcement agencies and personnel worldwide.
  • Foster cross-departmental engagement and streamline workflows.
  • Respond promptly and efficiently to user needs.
  • Stay abreast of industry and market trends.

Requirements

  • Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
  • Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
  • Fluent in English, plus Brazilian Portuguese or Spanish; proficiency in all 3 is strongly desired.
  • Exceptional verbal and written communication skills.
  • Ability to seamlessly operate across various time zones.
  • Self-starter with the ability to work autonomously.
  • Excellent interpersonal skills to engage with diverse management levels.

Preferred Qualifications

  • Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.
  • Technical Autonomy: Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs) without dependency on a specific commercial vendor platform.
  • Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.
  • Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
  • Sector Background: Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.

Benefits

  • Remote-first within the U.S.
  • Annual offsites in exciting locations. Past trips include Seattle, Miami, Nashville, and San Francisco
  • Competitive salary and meaningful equity
  • Unlimited Vacation + 14 company holidays
  • 12 weeks of fully paid parental leave , with a flexible return-to-work policy
  • Comprehensive medical, dental, and vision plans
  • 401(k) retirement plan
  • Dynamic Environment: Work on impactful, high-priority matters with opportunities for professional growth.

Applicants must be currently authorized to work in the United States on a full-time basis. We are unable to sponsor or transfer employment visa sponsorship for this position.

Equal Employment Opportunities at the Company

Kodex is committed to hiring talented and qualified individuals with diverse backgrounds for all of its tech, non-tech, and leadership roles. Kodex believes that the gathering and celebration of unique backgrounds, qualities, and cultures enriches the workplace.

Where you can be based

This position is 100% remote and open to applicants based in United States.

Text as Kodex published it; last compared with the original on 13 Nov 2026.

Apply on Kodex (shows the role here)

The application

Your details and CV, then 9 questions (2 written).

Keep these to handCVLinkedIn (optional)
  1. 1.
    Are you currently authorized to work lawfully in the United States?Yes or no
  2. 2.
    Will you now or in the future require employment-based visa sponsorship to work in the United States?Yes or no
  3. 3.
    How many years of full-time experience do you have in threat intelligence, SOC analysis (tier 3+), incident response, trust & safety investigations, or a related intelligence field?Number
  4. 4.
    Describe a specific investigation where you had to make a decision under time pressure with incomplete information. What signals did you rely on, and how did you validate your conclusion?Written answer
  5. 5.
    Which of the following describe your professional background? Select all that apply.Choose any (7 choices)
  6. 6.
    What tools do you use most in your investigation workflow? (OSINT tools, custom scripts, platforms - actual names OK.)Written answer
  7. 7.
    Are you comfortable making autonomous identity verification decisions at pace, using your own judgment on when to escalate?Yes or no
  8. 8.
    This role provides coverage during Brazilian business hours (roughly 9am-6pm Brasilia Standard Time), with occasional flexibility for high-priority, time-sensitive investigations. Are you able to consistently work these hours?Yes or no
  9. 9.
    Do you speak Portuguese?Yes or no

Taken from Kodex's application form as it stood on 13 Nov 2026.

The employer: Kodex

Runs a verified network through which companies answer law enforcement data requests; it is hiring four threat intelligence specialists and a security engineer.

Pay and benefits: Full-time remote staff roles, each hired within a set country or US time zone.

Full postings from Kodex All Kodex openings on the board Kodex employer profile

Other security roles worth a look

Let security teams come to you

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when Kodex posts a security role

We read Kodex's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.