CTI Outbound Researcher

Location: Remote, Tel Aviv-Jaffa, Tel Aviv District, Israel

Company

hirify.global develops sovereign AI and national cyber-defense products for governments, combining AI-native resilience with visibility and intelligence across posture, CTI, and detection and response.

What you will do

• Investigate threat actors, adversary infrastructure, malware campaigns, vulnerabilities, and emerging activity.
• Expand investigations across domains, IP addresses, ASNs, certificates, passive DNS, files, URLs, hosting providers, and registration data.
• Form and test intelligence hypotheses, assess attribution, distinguish evidence from analytical judgments, and evaluate uncertainty.
• Identify, validate, prioritize, and track IOCs, translating findings into detections, hunting opportunities, watchlists, and early-warning intelligence.
• Write threat research reports, technical blogs, campaign analyses, executive briefs, and customer-facing publications for technical and non-technical audiences.
• Collaborate with Engineering, MLOps, Data, Product, Marketing, PR, Communications, and external CTI partners on intelligence capabilities, publications, and information sharing.

Requirements

• At least 3 years of hands-on experience in Cyber Threat Intelligence, adversary infrastructure research, malware or campaign analysis, incident-response intelligence, EASM, or a related field.
• Strong understanding of DNS, passive DNS, IP addressing, ASNs, hosting and cloud providers, TLS/PKI, domain lifecycles, registration data, and phishing infrastructure.
• Hands-on experience with commercial and open-source intelligence platforms such as VirusTotal, DNSDB, Censys, Shodan, SecurityTrails, MISP, or OpenCTI.
• Working knowledge of STIX 2.1, MITRE ATT&CK, TAXII, the intelligence lifecycle, and structured analytical techniques.
• Ability to investigate an initial indicator through infrastructure expansion, campaign assessment, confidence evaluation, and defensive recommendations.
• Strong analytical writing and presentation skills, including the ability to explain technical findings, evidence limits, and uncertainty to researchers, customers, executives, and public audiences.
• Interest in building professional relationships across the CTI community and working with external partners, PR teams, and communications teams.
• Experience using Python, notebooks, or similar tools for enrichment, analysis, automation, and reproducible research.

Nice to have

• Familiarity with Neo4j or Elasticsearch.
• Published threat research, conference or webinar experience, and participation in intelligence-sharing communities.

Culture & Benefits

• Remote work arrangement.
• Work alongside AI researchers, cyber operators, government experts, and cross-functional engineering, data, product, marketing, and communications teams.
• Maintain analytical independence and evidence standards while following sourcing, provenance, responsible-disclosure, legal, and data-quality requirements.