Description
Recorded Future's Insikt Group is seeking a Threat Intelligence Analyst to join the Threat Research & Analysis (TR&A) team. The role involves tracking nation-state and cybercriminal threat actors and emerging cyber threats that matter most to clients.
Responsibilities:
- Conduct proactive hunting for threat actors by establishing methods to identify, signature, and validate malicious infrastructure.
- Conduct technical research into nation-state and cybercriminal threat actors, dissecting their tools and TTPs to produce high-impact finished intelligence for clients and the Recorded Future public blog.
- Represent Insikt Group as a subject matter expert through customer briefings, media engagements, and public research dissemination, focusing on malicious infrastructure and regional threat landscapes.
- Collaborate with geopolitical and regional analysis teams to support cross-functional research.
- Mentor and guide analysts within the team, fostering a culture of knowledge sharing, skill development, and professional growth.
- Continuously improve and optimize threat intelligence processes, tools, and methodologies to enhance the team's ability to detect and respond to emerging threats.
- Stay up to date on evolving Threat Actor tradecraft and the global malware landscape by monitoring technical publications, blogs, and trusted sharing communities.
Requirements:
- A passion for threat hunting and threat intelligence.
- Demonstrative understanding of malicious infrastructure detection.
- Ability to leverage AI/LLMs to automate workflows.
- Demonstrable experience conducting technical threat analysis and research.
- Experience with structured analytical techniques, the intelligence cycle, and intelligence writing techniques.
- Fluency in common CTI research and data analysis platforms/tools.
- In-depth understanding of TCP/IP and other networking protocols.
- Experience working directly with customers.
- Practical experience using common threat intelligence analysis models.
- Excellent interpersonal and teamwork skills.
- 2+ years of experience in Information Security and/or Threat Intelligence.
- Ability to work from a Recorded Future office at least 3 days per week.
Preferred Qualifications:
- Proficiency in a foreign language (Arabic, Turkish or Persian/Farsi).
- MA/MS or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field.
- Scripting capabilities (Python preferred).
- Experience writing network and/or endpoint signature detections.
- Experience with business risk analysis.
The base salary range for this full-time position is $92,500 - $139,000.