Threat Intelligence Specialist - LATAM

About the company

Kodex revolutionizes how organizations handle sensitive subpoenas and data requests from law enforcement and government agencies. Founded by a former FBI agent and backed by leading investors including Andreessen Horowitz, Y Combinator, Peak XV and Thiel Capital, Kodex has become the industry standard for secure data exchange. Our platform supports over 15,000 government agencies in 190 countries and is trusted by industry leaders like Coinbase, Stripe, and AT&T.

By transforming a traditionally complex and manual process into a streamlined digital workflow, Kodex helps organizations strengthen compliance, enhance security, and reduce operational costs by millions each year. We bridge the gap between companies and authorized requestors, ensuring that sensitive data is handled with uncompromising security, transparency, and efficiency.

We’re seeking a Threat Intelligence Specialist to spearhead our efforts in enhancing law enforcement operations across the LATAM Region. The ideal candidate will possess practical experience in law enforcement, adept relationship-building skills, and the ability to swiftly address threat detections with a critical, logical, and analytical mindset. As a key guardian of our platform’s security, you’ll play a vital role in ensuring the safety of our clients and their end-users, enriching their experience in ways that are indispensable.

• Analyze data and information to identify confirmed relationships.
• Research and document threat actor tactics, including the creation of fake law enforcement personas and agencies, the compromise of legitimate agent accounts and credentials, and the abuse of trusted access for fraudulent purposes.
• Initiate communication with international government agencies across different time zones via calls and emails.
• Establish and nurture relationships with law enforcement agencies and personnel worldwide.
• Foster cross-departmental engagement and streamline workflows.
• Respond promptly and efficiently to user needs.
• Stay abreast of industry and market trends.

• Minimum of 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
• Demonstrated proficiency in pivot-based OSINT (passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, email infrastructure analysis).
• Fluent in English, plus Brazilian Portuguese or Spanish; proficiency in all 3 is strongly desired.
• Exceptional verbal and written communication skills.
• Ability to seamlessly operate across various time zones.
• Self-starter with the ability to work autonomously.
• Excellent interpersonal skills to engage with diverse management levels.

• Adversarial Knowledge: Direct experience with account takeover (ATO), synthetic identity fraud, data theft/extortion, spear phishing and targeted intrusions, underground cybercrime ecosystems, and organizational-level impersonation.
• Technical Autonomy: Expertise in network and host based security controls, as well as designing, working with, and training others on homegrown and open-source tools (Shodan, Censys, Virus Total, APIs) without dependency on a specific commercial vendor platform.
• Intelligence Tradecraft: Proficiency in the operational application of the MITRE ATT&CK framework.
• Domain Expertise: Background in law enforcement (cyber investigation, financial crimes, or digital forensics) or the legal process ecosystem (subpoenas, EDRs, court orders).
• Sector Background: Experience in Fin Tech, crypto, or identity verification platforms where identity fraud is the primary threat vector.

• Remote-first within the U.S.
• Annual offsites in exciting locations. Past trips include Seattle, Miami, Nashville, and…