Senior Threat Intelligence Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct research and analysis on criminal activities occurring in the dark web and underground platforms to pinpoint trends in cybercrime and the actors involved.

• Identify and maintain relationships with sources, engaging with threat actors to gather non-public information.

• Perform proactive research and address inquiries from colleagues and customers regarding cybercriminal activities.

• Utilize OSINT, the Recorded Future Intelligence Operations Platform, and AI to deliver timely and actionable intelligence.

• Research, monitor, and compose finalized intelligence reports on threat actors, malicious tools and services, source types, TTPs, campaigns, and cybercriminal subjects.

• Identify, recommend, and publish proactive Analyst Notes and reports concerning emerging threats, dark web actors, money laundering schemes, hacktivists, and cybercriminal organizations.

• Facilitate the sourcing, collection, and curation of new data into the Recorded Future Intelligence Cloud with the aid of AI-assisted triage.

• Establish and maintain access to underground sources and personas.

• Contribute innovative ideas for automations and AI-assisted workflows to enhance production speed and consistency.

• Share insights and best practices widely within the organization.

• Collaborate with other teams within Insikt Group on research initiatives and customer inquiries.

⛳️ Requirements

• Proficiency or fluency in Russian.

• Strong expertise and experience in analytic tradecraft, the intelligence cycle, open-source intelligence gathering methods, and intelligence writing.

• Capability to document and articulate research findings to customers.

• Skill in presenting research outcomes to customers and at conferences.

• Over 3 years of professional experience in cyber intelligence, cybersecurity, cyber and cybercriminal investigations, or related fields.

• Advanced understanding of operational security (OPSEC) procedures and practices.

• Proven experience working with dark web sources, including forums, marketplaces, and shops.

• Experience in engaging with cybercriminals and participating in covert operations while managing sensitive information.

• Knowledge of the structure and trends within the cybercriminal economy and landscape.

• Experience in handling, transacting with, and tracing cryptocurrencies.

• Familiarity with conducting blockchain and cryptocurrency investigations.

• Understanding of money laundering, fraud, and current cybercrime TTPs.

• Ability to work effectively in a globally distributed team environment.

• Regular hands-on experience using AI tools such as Claude or ChatGPT in research and writing tasks.

• Competence in writing clear AI prompts and fact-checking as well as editing AI-generated content.

• BA/BS or MA/MS degree or equivalent experience in Computer Science, International Relations, Security Studies, Regional Studies, Criminology, or a related field (preferred).

• Knowledge of the cybercriminal ecosystem (preferred).

• Awareness of connections between cybercriminal, hacktivist, extremist, and state-sponsored operations (preferred).

• Technical understanding of malware trends, including ransomware (preferred).

• Practical experience integrating or utilizing LLMs in applications, tools, or workflows (preferred).

🏝️ Benefits

• Eligibility for incentive compensation.

• Equity eligibility.

• Medical insurance coverage.

• Dental insurance coverage.

• Vision insurance coverage.

• Life insurance coverage.

• 401K plan.

• Accommodation or special assistance available during the application process.

• Equal opportunity and affirmative action employer.

• Drug-free workplace.