Lead Cyber Threat Intelligence Data Architect

- Own Anomali ThreatStream administration, configuration, and platform strategy - Manage feeds, integrations, data quality, and platform governance - Serve as the subject matter expert to CTI analysts and stakeholder teams on threat intelligence data structure, integration, and delivery

- Set and evolve the standards, methods, and best practices for how Humana's cyber threat intelligence is structured, maintained, and delivered so it is usable by both analysts and AI systems - Design and maintain how Humana's cyber threat intelligence is organized so it is consistent, searchable, and reusable - structuring it so AI agents and automated systems can reliably query and consume it - Build the workflows and pipelines that turn analytical work into structured intelligence records optimized for both human use and AI consumption

- Own the technical relationship with stakeholders that consume CTI data through AI agents, automated systems, and other tools - Manage API access, data versioning, and analytics on how CTI data is being used by downstream systems - Work with consuming teams to understand what threat intelligence their AI and automation workflows need, and ensure it is available in a form those systems can use - Identify opportunities to improve tools, workflows, and processes that impact how CTI supports security operations, detection engineering, and vulnerability management

- Own the collection plan and ensure sources are aligned to intelligence requirements and stakeholder information needs - Evaluate source quality, timeliness, and value to ensure intelligence meets stakeholder needs

- 7+ years of related experience across cyber threat intelligence, security data platforms, or intelligence infrastructure, including experience leading projects or functional initiatives - Demonstrated understanding of how AI and automated systems consume structured data, and the ability to organize threat intelligence so it is usable by both analysts and AI-driven tools - Bachelor's degree or equivalent experience - Strong understanding of CTI workflows, collection management, and intelligence

requirements - Demonstrated intellectual curiosity and adaptability - Firm understanding of the cyber threat landscape - Experience administering a threat intelligence platform, ideally Anomali ThreatStream - Experience structuring threat intelligence data, designing schemas, and building API-based integrations - Demonstrated ability to own a technical function independently and drive standards across stakeholders

- Familiarity with MITRE ATT&CK, STIX/TAXII, and other structured intelligence frameworks - Experience integrating threat intelligence with detection engineering, SOC, or vulnerability management workflows