Senior Threat Intelligence Researcher

Written by the T&S Network from Alice's posting.

Cyber threat intelligence research against fraud and abuse targeting a company's clients. The work covers threat groups and their tactics across fraudulent ecosystems, drawing on clear, deep and dark web sources. The team is there to stay ahead of adversaries by monitoring ongoing and emerging threats and producing intelligence for client accounts.

• Fraud and scams

What you'd do

• Hunt, detect, monitor and research threats against client platforms.
• Analyze threat groups and TTPs across fraudulent ecosystems.
• Monitor clear, deep and dark web sources for emerging threats.
• Write technical reports on threat actor TTPs and exploits for client account leads.
• Review and enrich other analysts' work and share analyst tradecraft.
• Draft threat and trend assessments from the research the team collects.

What it asks for

• Experience in anti-bot detection/research, proxy detection/research, or web scraping development/detection/prevention.
• Experience in technical CTI threat hunting, including databases and IPv4/IPv6 intelligence.
• Experience with VirusTotal, UrlScan, Greyhat Warfare and Shodan.
• Experience analyzing threat groups and actors using OSINT and WEBINT methods.
• Darkweb and cybercrime intelligence experience.
• Proven skill collecting and judging intel pulled from social platforms, chat apps and darknet forums.
• Strong English writing and briefing skills.

Terms in this role

OSINT.

Open-source intelligence: investigating with publicly available information, such as social media, public records, archived pages and imagery.

Red teaming.

Testing a system, often an AI model, by deliberately trying to make it fail or misbehave, so problems are found and fixed first.

Our best summary of the posting, and it can be wrong. The employer's posting is what counts: read it in full on Alicenorth_east before you apply. If we got something wrong, report this listing.