Threat Intelligence Researcher

Remote · USA Full-time New today

Job Description:

Identify, track, and analyze advanced persistent threats (APTs), their TTPs, and their live infrastructure to gain insights into attack vectors, victimology, and attack scale.
Produce timely and actionable intelligence reports for customers, press, and partners. Participate in customer briefings, incident mitigation, and coordinated threat actor (TA) takedowns.
Develop and maintain high-fidelity detection signatures (YARA, Snort, Sigma) to protect customers.
Query massive datasets (using SQL, Python, or Splunk) to identify anomalies and map out adversary infrastructure. Build workbooks, dashboards, and develop methodologies to improve detections.
Design and leverage AI and LLM automations to support your analysis workload.

Requirements:

Bachelor's or Master's in Computer Science, Cybersecurity, or a highly technical equivalent.
3–5 years in a hands-on threat intelligence research role within a prominent industry organization, military, law enforcement, or government.
Familiarity with prominent threat actors, APTs, emerging threat vectors, and the wider threat landscape.
Proficiency with large dataset querying and dashboard design using Splunk, SQL, or similar platforms.
A hacker's curiosity — the ability to look at a data point and see the hidden pattern.
Bonus: Experience with open source and commercial attack surface, malware analysis, and network intelligence tools and platforms.
Additional Bonus: Native-level reading and writing proficiency in Russian, Mandarin, Korean, or Farsi.

Benefits:

Apply tot his job Apply To this Job

Related roles