Threat Actor Engagement & Intelligence Consultant (Cybersecurity)

Location: Remote, anywhere in the U.S.; U.S.-based only

Company

hirify.global is a privately held information security services and solutions company providing cybersecurity expertise, threat intelligence, digital forensics, incident response, and advisory services to enterprise and government clients.

What you will do

• Lead threat actor communications and ransomware or data extortion engagements.
• Advise clients, legal counsel, and insurance carriers on communication risks, benefits, and key considerations.
• Support digital forensics and incident response investigations by identifying and sharing actionable intelligence.
• Produce engagement deliverables for technical and managerial audiences, including findings, recommendations, business impact, and remediation strategies.
• Use scripting, automation, orchestration, and security tools to improve GRIT processes and capabilities.
• Support a rotating on-call schedule, including possible weekend work for emergency requirements.

Requirements

• 2–4 years of experience communicating with threat actors through virtual persona operations, ransomware negotiations, or sock-puppet accounts in deep and dark web collection.
• At least 2 years of experience performing threat intelligence analysis and/or collection.
• Experience with intelligence-sharing relationships in the private sector, ISACs, government, and/or private intelligence-sharing groups.
• Experience building and developing persona operations, with familiarity with dark web forums and marketplaces, adversary behavior, and trust mechanisms.
• Familiarity with digital forensics and incident response workflows, processes, and deliverables.
• Experience in client-facing, professional services, or consulting roles.
• Experience using emerging technologies, including AI tools, to solve problems and improve business outcomes.
• Ability to work sedentary computer-based duties involving extensive terminal viewing, reading, and wrist, hand, and finger movement for at least 8 hours per day.

Nice to have

• Familiarity with cryptocurrency tracing and blockchain technology.
• Experience improving operational processes and procedures across the intelligence lifecycle.
• Experience hunting APT data with open-source or commercial cyber threat analytics tools or repositories, including VirusTotal, Passive Total, Threat Miner, or Maltego.
• Experience scoping and conducting research on cybercrime, ransomware, and/or nation-state cyber operations.

Culture & Benefits

• Primarily remote U.S.-based workforce; travel is not required for this position.
• Medical, dental, HSA, retirement plan, and pet benefit options.
• 12 corporate holidays and a flexible time off program.
• Mobile phone and home internet allowance.
• Collaborative environment with mentorship and opportunities for professional growth.

Hiring process

• Greenhouse is used for applicant tracking and Zoom Scheduler is used for HR screening requests.
• Applicants should check their spam folder to avoid missing application updates.