Fraud Analyst

This is a fully remote position, open to applicants in District of Columbia, +2 more states.

📋 Description

• Perform research on emerging cyber threats, adversary activities, and global threat patterns.

• Gather, evaluate, and consolidate data from both technical and open sources to generate actionable intelligence.

• Aid in the tracking of threat actor infrastructure, campaigns, and their evolving tactics, techniques, and procedures (TTPs).

• Monitor and analyze Chinese-language sources to detect relevant threat activities and insights.

• Contribute to the production of high-quality intelligence reports for both internal and external stakeholders.

• Assist in identifying and creating indicators and detection opportunities.

• Collaborate with intelligence, engineering, and data science teams.

• Continuously enhance technical expertise and remain informed about the evolving threat landscape and tradecraft.

⛳️ Requirements

• BA/BS degree or equivalent experience in Computer Science, Information Security, Intelligence, Security Studies, or a related discipline.

• 1–2 years of experience in Threat Intelligence, Cybersecurity, or a related field, which may include internships or academic research.

• Foundational understanding of cyber threat analysis and intelligence methodologies.

• Basic knowledge of networking concepts, including TCP/IP, DNS, and internet infrastructure.

• Experience or familiarity with analyzing technical artifacts such as domains, IP addresses, and associated metadata.

• Familiarity with OSINT collection and analysis methodologies.

• Exposure to common CTI tools and workflows, including Jupyter Notebook, Maltego, and Elastic Stack.

• Understanding of structured analytic techniques and frameworks like MITRE ATT&CK, the Cyber Kill Chain, or the Diamond Model.

• Strong analytical, problem-solving, and critical thinking abilities.

• Proficient written and verbal communication skills, capable of conveying technical concepts to diverse audiences.

• Ability to collaborate effectively in a fast-paced, globally distributed team environment.

• Professional working proficiency in Chinese, with the capability to read, analyze, and synthesize native-language sources.

• Preferred: experience in analyzing financially motivated cyber activities such as phishing, scams, or account compromise.

• Preferred: basic scripting or programming experience, with Python being favored, for data analysis or task automation.

• Preferred: familiarity with underground ecosystems, including forums, marketplaces, or messaging platforms like Telegram.

• Preferred: understanding of payment systems, cryptocurrency usage, or fraud-related typologies.

• Preferred: experience working with threat intelligence datasets or conducting large-scale data analysis.

• Preferred: exposure to detection development or identifying indicators of malicious or suspicious activities.

• Working knowledge of Russian is a plus.

🏝️ Benefits

• Eligibility for incentive compensation.

• Equity eligibility.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Life insurance coverage.

• 401K retirement plan.

• Equal opportunity and affirmative action employer.

• Accommodation or special assistance available during the application process.