Threat Researcher (Cybersecurity)

Location: Remote - USA

Base salary: $122,400–$176,000 USD per year, plus possible bonus or incentive compensation, equity, and benefits.

Company

Cybersecurity product company providing an AI-powered platform for detecting and responding to email and identity threats.

What you will do

• Lead complex threat intelligence investigations into active campaigns, attacker behavior, TTPs, and emerging email and identity attack techniques.
• Use platform telemetry, internal data, threat intelligence sources, and external research to identify patterns, trends, and meaningful threat insights.
• Synthesize conflicting intelligence into defensible assessments, recommendations, narratives, and business-risk explanations tailored to specific audiences.
• Create threat briefs, analytical reports, customer QBR content, executive summaries, briefings, webinars, presentations, and marketing or outreach content.
• Lead customer and prospect engagements, adapting technical depth in real time and responding to challenging questions.
• Collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing; mentor P1 and P2 analysts and develop AI-assisted workflows and automation.

Requirements

• 4+ years of experience in threat intelligence, SOC operations, or a closely related cybersecurity discipline.
• Working knowledge of email and identity attack techniques, IOCs, TTPs, attack campaigns, and threat behavior.
• Experience conducting security research and producing written intelligence or security content for different audiences.
• Ability to synthesize technical research and data from multiple sources into clear assessments, narratives, and recommendations, including during complex or ambiguous investigations with incomplete or conflicting evidence.
• Familiarity with threat intelligence platforms, intelligence-sharing communities, and threat hunting concepts.
• Strong writing and presentation skills, including the ability to explain complex technical intelligence clearly to customers, executives, security practitioners, and other stakeholders.
• Experience working directly with customers or cross-functional stakeholders and translating technical findings into business relevance.
• Proficiency with AI tools such as ChatGPT, Claude, Claude Code, Copilot, or similar tools, including demonstrated use of AI or automation to scale research, analysis, or content production.
• Strong project management, prioritization, responsiveness, and accuracy under high-pressure or time-sensitive conditions.
• Ability to independently scope, prioritize, and deliver complex intelligence work from investigation through final assessment and customer-ready communication.
• Ability and willingness to strengthen other analysts through peer review, knowledge sharing, coaching, and collaborative problem-solving.
• Working knowledge of the MITRE ATT&CK framework and common attack techniques, including phishing, business email compromise, credential harvesting, malware, and account takeover.
• Basic proficiency in SQL for retrieving, filtering, and analyzing datasets in threat intelligence research and investigations.

Nice to have

• Experience in email security, phishing detection, anti-abuse systems, or email threat containment.
• Experience in detection engineering, incident response, and email security analysis.
• Experience with Abnormal Security or similar security platforms.
• Public-facing security content experience, including published research, blogs, conference talks, webinars, or industry reports.
• Experience creating intelligence content for sales cycles, customer QBRs, or other customer-facing security engagements.
• Experience creating training or enablement materials for Sales, Customer Success, or other non-technical teams.
• Experience mentoring, coaching, or training earlier-career security analysts.
• Experience using Python or other scripting tools to automate data analysis, investigate threat activity, or improve research workflows.
• Security certifications such as Security+, GIAC GCTI or GCIH, CISSP, CEH, or similar.

Culture & Benefits

• Remote work from the USA.
• Possible bonus or incentive compensation, equity, and a comprehensive benefits package in addition to base salary.
• Human review remains part of recruiting and hiring decisions when AI-assisted recruiting tools are used.
• Equal opportunity employment and pre-employment checks in line with applicable legislation and security and privacy policies.

Hiring process

• AI-assisted tools may help prepare interview questions and identify areas for interviewer exploration, but do not make hiring decisions or automatically screen candidates.
• Conditional offers are followed by pre-employment checks that must be successfully completed before a final offer.