Назад
Company hidden
9 часов назад

Threat Intelligence Analyst (Cybersecurity)

92 500 - 139 000$
Формат работы
hybrid
Тип работы
fulltime
Грейд
junior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Threat Intelligence Analyst (Cybersecurity): Conducting threat hunting and technical research on nation-state and cybercriminal actors, malicious infrastructure, tools, and TTPs with an accent on actionable intelligence, detection development, and client-facing analysis. Focus on identifying C2s and botnets, applying MITRE ATT&CK and other intelligence models, using AI/LLMs to accelerate workflows, and producing high-fidelity research and detections.

Location: Hybrid; must work from a hirify.global office in Boston, MA or Arlington, VA at least 3 days per week.

Salary: $92,500–$139,000 base salary per year, with possible incentive compensation, equity, and benefits.

Company

hirify.global is an intelligence company serving more than 1,900 clients with over 1,000 intelligence professionals.

What you will do

  • Proactively hunt nation-state and cybercriminal threat actors by identifying, signing, and validating malicious infrastructure such as C2s and botnets.
  • Conduct technical research into threat actors, malware, tools, TTPs, and regional threat landscapes.
  • Produce actionable finished intelligence, public research, and network or endpoint detections for clients and the hirify.global blog.
  • Represent Insikt Group through customer briefings, media engagements, and public research dissemination.
  • Collaborate with geopolitical and regional analysis teams, mentor analysts, and improve threat intelligence processes, tools, automation, and methodologies.
  • Monitor technical publications, blogs, and trusted sharing communities to track evolving threat actor tradecraft and the global malware landscape.

Requirements

  • Passion for threat hunting and threat intelligence, with 2+ years of experience in Information Security and/or Threat Intelligence.
  • Demonstrable experience conducting technical threat analysis and research, including malicious infrastructure detection, pivoting, network defense, and business risk analysis.
  • Understanding of structured analytical techniques, the intelligence cycle, and intelligence writing methodologies.
  • Fluency with CTI research and data analysis platforms such as Elastic Stack, Maltego, Modat, Shodan, Censys, DomainTools, or similar tools and datasets.
  • In-depth understanding of TCP/IP, other networking protocols, and network traffic analysis techniques.
  • Experience applying MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain.
  • Ability to use AI/LLMs to automate routine work while maintaining rigorous human review and verified, high-fidelity intelligence.
  • Customer-facing experience and strong written, verbal, interpersonal, and teamwork skills for explaining complex technical and non-technical concepts.
  • Ability to work from a hirify.global office in Boston, MA or Arlington, VA at least 3 days per week.

Nice to have

  • Proficiency in Arabic, Turkish, or Persian/Farsi.
  • MA/MS or equivalent experience in Computer Science, Computer Engineering, Information Security, or a related field.
  • Scripting experience, preferably Python.
  • Experience writing network or endpoint signature detections using Suricata, Snort, YARA, SIGMA, or similar tools.
  • Experience with business risk analysis and communicating business risks to executives.

Culture & Benefits

  • Work with a globally distributed team representing more than 40 nationalities.
  • Culture emphasizes high standards, inclusion, ethical conduct, and knowledge sharing.
  • Benefits may include medical, dental, vision, life insurance, and 401(k).
  • The position may include incentive compensation and equity.

Hiring process

  • Final-round candidates must complete either an in-person interview or a live, scheduled video conference with the hiring manager; interviews are not conducted through instant messaging or text.
  • Applications must be submitted directly by candidates. Agencies require a valid written agreement and prior written authorization from hirify.global.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →