Senior Threat Intelligence Researcher

We’re looking for a Senior Threat Intelligence Researcher to join a highly technical Cyber Threat Intelligence team.

This role is ideal for someone who is genuinely curious about how threat actors operate, enjoys deep technical research, and knows how to turn scattered information from the internet into actionable intelligence.

We’re looking for more than someone who can execute predefined research. You’ll have the opportunity to lead technical investigations, conduct independent research, identify emerging threats, and make a real impact on how organizations understand and respond to the threat landscape.

Responsibilities:

• Hunt, detect, monitor, and investigate emerging cyber threats and threat actors.
• Analyze threat groups, campaigns, TTPs, and fraudulent ecosystems.
• Conduct research across the clear, deep, and dark web using OSINT and WEBINT methodologies.
• Investigate and monitor sources including social media, online communities, chats, forums, and darknet platforms.
• Produce high-quality technical intelligence reports covering threat actor activity, TTPs, exploits, and relevant emerging threats.
• Work closely with analysts, account leads, and other stakeholders to translate research into actionable intelligence.
• Enrich and review intelligence produced by other researchers and contribute to analyst tradecraft and research methodologies.
• Identify emerging trends and develop assessments based on collected intelligence and independent research.
• Take ownership of research topics and proactively pursue new leads, techniques, and sources.

Requirements:

• Experience in one or more of the following areas:
• Anti-bot detection or research
• Proxy detection or research
• Web scraping development, detection, or prevention
• Hands-on experience with technical CTI and threat hunting, including areas such as IP intelligence and IPv4/IPv6 research.
• Experience using threat hunting and investigation platforms such as VirusTotal, URLScan, GreyNoise/Greyhat Warfare, Shodan, or similar.
• Strong experience analyzing threat actors and groups using OSINT and WEBINT methodologies.
• Experience with dark web and cybercrime intelligence.
• Proven ability to independently gather, investigate, validate, and connect information from multiple sources.
• Strong written and verbal English, with the ability to communicate complex intelligence clearly through reports and briefings.
• Demonstrated experience researching information across social media, online communities, chats, and darknet forums.

Nice to have:

• Scripting experience with Python, Bash, or equivalent.
• Experience with threat intelligence platforms such as Intel 471, Recorded Future, Flashpoint, CyberSixgill, or similar.
• Foreign language proficiency.
• Experience working in a client-facing intelligence or research environment.