Head of Threat Intelligence

Promise

. Build monitoring tripwires across Wikipedia, Wikidata, search results, review and complaint sites, domain registrations, social platforms, paste sites, and public records .

Posted 10/27/2026full-timeSan Francisco • California • United StatesLead💰 $210,000 - $260,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat intelligence and trust and safety investigations, with a strong ability to produce defensible evidence and manage complex investigations. Proficient in account-graph analysis and familiar with platform processes related to online safety and security.

Highest-signal resume keywords

Threat Intelligence ExperienceAccount-Graph AnalysisEvidence ProductionTrust And Safety InvestigationsKnowledge Of Doxxing And Phishing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Account-Graph AnalysisStylometryMetadata AnalysisTiming AnalysisEvidence ProductionDisinformation ResearchOSINT Investigative JournalismThreat IntelligenceSubpoena-Ready Evidence PackagesPreservation Lists

Soft Skills

Strong Writing Skills

Industry Keywords

Trust And SafetySockpuppet InvestigationsBiography-Of-Living-Persons NoticeboardsPublic Records RequestsPhysical-Security ThreatsDoxxingImpersonationPhishing DomainsRegulator ReferralsLitigation Counsel

About the role

Key responsibilities & impact

Build monitoring tripwires across Wikipedia, Wikidata, search results, review and complaint sites, domain registrations, social platforms, paste sites, and public records
Cover Promise, its executives, and key clients, providing alerts within an hour
Attribute hostile activity using account-graph analysis, stylometry, metadata, and timing
Produce named hypotheses, confidence levels, and evidence suitable for counsel
Enforce platform processes, including living-persons noticeboards, sockpuppet investigations, repository and registrar takedowns, and search removals
Work with platform trust and safety teams
Support counsel with preservation lists, subpoena-ready evidence packages, public records requests, and referrals to Attorneys General and Inspectors General
Conduct investigations at counsel's direction and under privilege
Work with counsel on platform bans, regulator referrals, and formal complaints
Protect executives from doxxing, impersonation, phishing domains, and physical-security threats
Write noticeboard posts, referrals, and evidence memoranda
Manage outside firms including Wikipedia consultants, litigation counsel, and investigators
Own the surfaces where Promise and its leaders are judged, with a direct line to the CEO

Requirements

What you’ll need

Experience in threat intelligence, trust and safety investigations, disinformation research, or OSINT investigative journalism with a digital forensics record
Ability to monitor Wikipedia, Wikidata, search results, review and complaint sites, domain registrations, social platforms, paste sites, and public records
Account-graph analysis, stylometry, metadata, and timing analysis
Ability to produce named hypotheses, confidence levels, and defensible evidence for counsel
Knowledge of biography-of-living-persons noticeboards, sockpuppet investigations, repository and registrar takedowns, and search removals
Familiarity with major platforms' trust and safety teams
Ability to build preservation lists, subpoena-ready evidence packages, public records requests, and referrals to Attorneys General and Inspectors General
Knowledge of doxxing, impersonation, phishing domains, and physical-security signals
Strong plain, short, exact writing skills
Must be a US person: US citizen or permanent resident (e.g., Green Card holder)
Must reside in the US
Must be able to work in person at the Promise office at least four times per week

Benefits

Comp & perks

Equal opportunity employer
Reasonable accommodations for qualified individuals with disabilities, pregnant individuals, and those with sincerely held religious beliefs
US government contract employment with E-Verify participation