Description
Recorded Future's Insikt Group is seeking a Threat Intelligence Analyst to join our Threat Research & Analysis (TR&A) team, focusing on tracking nation-state and cybercriminal threat actors and emerging cyber threats.
This role involves proactive monitoring and in-depth research into threat actor infrastructure, tools, and TTPs, as well as producing high-impact, actionable finished intelligence and detections.
Responsibilities:
- Conduct proactive hunting for threat actors by establishing methods to identify, signature, and validate malicious infrastructure;
- Conduct technical research into nation-state and cybercriminal threat actors, dissecting their tools and TTPs to produce high-impact finished intelligence for clients and the Recorded Future public blog;
- Represent Insikt Group as a subject matter expert through customer briefings, media engagements, and public research dissemination, focusing on malicious infrastructure and regional threat landscapes;
- Collaborate with geopolitical and regional analysis teams to support cross-functional research;
- Mentor and guide analysts within the team, fostering a culture of knowledge sharing, skill development, and professional growth;
- Continuously improve and optimize threat intelligence processes, tools, and methodologies.
Requirements:
- A passion for threat hunting and threat intelligence;
- Demonstrative understanding of malicious infrastructure detection;
- Ability to leverage AI/LLMs to automate workflows;
- Demonstrable experience conducting technical threat analysis and research;
- Fluency in common CTI research and data analysis platforms/tools;
- In-depth understanding of TCP/IP and other networking protocols;
- Experience working directly with customers;
- Practical experience using common threat intelligence analysis models;
- Excellent interpersonal and teamwork skills;
- 2+ years of experience in Information Security and/or Threat Intelligence;
- Ability to work from a Recorded Future office (Boston, MA or Arlington, VA) at least 3 days per week.
Preferred Qualifications:
- Proficiency in a foreign language (Arabic, Turkish or Persian/Farsi);
- MA/MS or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field;
- Scripting capabilities (Python preferred);
- Experience writing network and/or endpoint signature detections;
- Experience with business risk analysis.
The base salary range for this full-time position is $92,500 - $139,000.