Cyber Threat Intelligence Analyst

Location: Must be located in the Washington, D.C./Maryland/Virginia area; periodic in-person collaboration and travel may be required. Primary time zone overlap: US Eastern / Central.

Salary: $115,000–$160,000 per year, plus potential equity participation.

Company

hirify.global provides AI-powered blockchain intelligence solutions that help public- and private-sector organizations investigate illicit activity, disrupt crime, and improve security.

What you will do

• Investigate scam infrastructure by pivoting across domains, IPs, certificates, registrars, nameservers, hosting providers, and ASNs.
• Track scam campaigns and threat actors through infrastructure changes, takedowns, seizures, and re-registration.
• Fuse technical, open-source, financial, and on-chain intelligence to trace activity from infrastructure to wallets, laundering paths, and cash-out points.
• Build clustering logic, detection rules, automation, and tooling to proactively identify malicious infrastructure.
• Produce calibrated assessments, attribution analysis, and actionable targeting packages for government and law-enforcement consumers.
• Own the intelligence cycle end to end while partnering with analysts, engineers, product, and data teams.

Requirements

• 5+ years of experience in cyber threat intelligence or threat infrastructure analysis; this is not an entry-level position.
• Hands-on experience with infrastructure attribution, campaign tracking, passive DNS, WHOIS, certificate or Shodan-style fingerprinting, and phishing monitoring.
• Experience building detection or clustering logic, rules, or automation rather than only configuring vendor tools.
• Demonstrated attribution skills using open-source and commercial data.
• Experience producing actionable intelligence or targeting packages for government, law-enforcement, or equivalent consumers, with defensible analytical judgment.
• Must be located in the Washington, D.C./Maryland/Virginia area; periodic in-person collaboration and travel may be required.

Nice to have

• Experience investigating Southeast Asia scam operations, pig-butchering syndicates, romance fraud, or investment scams.
• Experience collaborating with federal partners or blockchain intelligence teams.

Culture & Benefits

• Distributed, async-first environment using Slack and Notion, with structured syncs and daily async standups.
• High autonomy, high standards, and direct collaboration with analysts, engineers, and customers.
• Weekly targeting-priority reviews and surge availability during time-sensitive disruption windows.
• Work at the intersection of AI, national security, blockchain intelligence, and crime prevention.
• AI fluency is expected and evaluated during the interview process.

Hiring process

• Recruiter introduction, hiring manager interview, and first-round skills interviews.
• Final panel interview, references, and offer discussion.
• The process may include a case study, AI skills assessment, and Leadership Principles interview.