Threat Intelligence Specialist – EMEA
At a glance
Mid-level Security Operations & Analysis role at Kodex. Remote, Ireland · full-time · no salary stated · we estimate €57,361–€99,400 across Ireland.
Kodex has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Check information for links that confirm whether law enforcement requesters are genuine
- Document impersonation methods, compromised agent accounts and other misuse of trusted access
- Contact government agencies across time zones by phone and email, and build working relationships with their staff
- Coordinate with other departments to smooth workflows and respond to user needs
What you bring
- At least three years investigating identity fraud, working in threat intelligence or doing related analytical work
- You can use pivot-based OSINT methods, including passive DNS, ASN attribution and WHOIS/RDAP
- You are fluent in English and can communicate clearly in writing and conversation
Who this fits
This role suits someone who can assess identity claims critically, work independently and build relationships with law enforcement contacts. It is remote within Ireland, with Dublin preferred, and calls or emails may span different time zones.
From the employer
About the company
Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T.
By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.
The Role
We’re seeking a Threat Intelligence Specialist to strengthen identity assurance for law enforcement users across the EMEA region. The ideal candidate brings practical law enforcement experience, strong relationship-building skills, and a critical, logical, and analytical mindset for quickly assessing whether requesters are who they claim to be. As a key guardian of our platform’s integrity, you’ll investigate suspicious access attempts, escalate signs of impersonation or compromise, and help ensure our clients can trust every request they receive.
Key Responsibilities
Analyze data and information to identify confirmed relationships.
Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.Initiate communication with international government agencies across different time zones via calls and emails.
Establish and nurture relationships with law enforcement agencies and personnel worldwide.
Foster cross-departmental engagement and streamline workflows.
Respond promptly and efficiently to user needs.
Stay abreast of industry and market trends.
What you bring
Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
Fluent in English
Exceptional verbal and written communication skills.
Ability to seamlessly operate across various time zones.
Self-starter with the ability to work autonomously.
Excellent interpersonal skills to engage with diverse management levels.
Nice to have
Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.
Technical Autonomy: Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, VirusTotal, APIs) without dependency on a specific commercial vendor platform.
Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.
Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
Sector Background: Experience in FinTech, crypto, or identity verification platforms where identity fraud is the primary threat vector.
Language skills: Fluency in Czech and/or French and/or Arabic
Benefits
Remote-first within Ireland (Dublin-based preferred)
Occupational pension scheme with employer contributions
Statutory paid annual leave and public holidays
Competitive salary and meaningful equity
Annual offsites in exciting locations (past trips include Seattle, Miami, Nashville, and San Francisco)
Global impact that comes from being part of a team that facilitates critical operations for law enforcement worldwide
Dynamic environment defines this role, with work on impactful, high-priority matters and opportunities for professional growth
Equal Employment Opportunities at the Company
Kodex is committed to hiring talented and qualified individuals with diverse backgrounds for all of its tech, non-tech, and leadership roles. Kodex believes that the gathering and celebration of unique backgrounds, qualities, and cultures enriches the workplace.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.