Principal Threat Researcher

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Gather, correlate, and analyze threat data from various global datasets to create cohesive intelligence narratives.

• Take the lead on threat research projects by designing, developing, and managing tools and workflows independently.

• Convert complex technical insights into clear, customized assessments for stakeholders in national security.

• Conduct pivot analysis across both closed- and open-source datasets to map C2 infrastructure and identify TTPs.

• Provide rapid turnaround threat analysis and technical insights during significant cyber incidents and urgent customer RFIs.

• Collaborate with internal research teams, product engineering, consulting, and sales to ensure strategic alignment.

• Monitor global adversary trends, address RFIs, and perform tailored intelligence research.

• Guide junior analysts and contribute to broader organizational initiatives.

⛳️ Requirements

• At least 7 years of experience in threat intelligence with a focus on ransomware, nation-state threats, cybercrime, and supply-chain vulnerabilities.

• In-depth understanding of adversary attack lifecycles, TTPs, and high-fidelity indicators of compromise.

• Proficiency in passive DNS, network infrastructure analysis, and host-based information analysis.

• Familiarity with scripting languages for the purposes of data collection and analysis.

• Capacity to lead tasks and projects autonomously while suggesting process enhancements.

• Strong problem-solving capabilities in complex and uncertain circumstances.

• Exceptional verbal and written communication skills.

• Experience in mentoring, team leadership, or serving as a technical reviewer for research outputs (preferred).

• Ability to interpret and act upon internal and external intelligence reports (preferred).

• Experience conducting dark web research with appropriate operational security (preferred).

• Knowledge of static and dynamic malware analysis tools (preferred).

• Previous experience working with or alongside government agencies or fusion centers (preferred).

• Experience presenting at large industry conferences (preferred).

• Comfortable working in a fully remote team environment (preferred).

• No immigration sponsorship; applicants must not require employer-sponsored work visas.

🏝️ Benefits

• Restricted stock units.

• Bonus.

• Employee benefits package.

• Reasonable accommodations for qualified individuals with disabilities.