Threat Intelligence Specialist – EMEA

The role

The Threat Intelligence Specialist will strengthen identity assurance for law enforcement users across the EMEA region. You will investigate suspicious access attempts, research threat actor tactics, and establish relationships with international law enforcement agencies.

What you will do

• Analyze data and information to identify confirmed relationships.
• Research and document threat actor tactics including fake personas and account compromise.
• Initiate communication with international government agencies via calls and emails.
• Establish and nurture relationships with law enforcement agencies and personnel worldwide.
• Foster cross-departmental engagement and streamline workflows.
• Respond promptly and efficiently to user needs.
• Stay abreast of industry and market trends.

Required qualifications

• Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
• Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
• Fluent in English
• Exceptional verbal and written communication skills.
• Ability to seamlessly operate across various time zones.
• Self-starter with the ability to work autonomously.
• Excellent interpersonal skills to engage with diverse management levels.

Nice to have

• Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impers
• Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs).
• Proficiency in the operational application of the MITRE ATT&CK framework.
• Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
• Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.
• Fluency in Czech and/or French and/or Arabic

Benefits

• Remote-first within Ireland (Dublin-based preferred)
• Occupational pension scheme with employer contributions
• Statutory paid annual leave and public holidays
• Competitive salary and meaningful equity
• Annual offsites in exciting locations

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. The platform supports over 15,000 government agencies in 190 countries.