Recorded Future is hiring a

Web3 Principal Threat Intelligence Analyst - Cybercrime

This role: Recorded Future’s Insikt Group is looking for a seasoned cybercrime analyst to focus on deep web investigations and operations. Among other activities, you’ll monitor cybercrime trends, activities, and methodologies across multiple platforms including open-source reporting, darknet forums, chat services, and other direct communications. You’ll work on both proactive research and requests from clients.

What you’ll do as a Threat Intelligence Analyst:

• Create and devise new sourcing, collection, and curation of data into the Recorded Future Platform
• Lead and direct finished intelligence products for Analyst on Demand clients
• Write reports ranging from brief descriptions of threats and threat actors to finished intelligence reports for clients and the general public
• Engage with threat actors to obtain unique and current threat intelligence information
• Propose and create proactive reporting topics on cybercriminal’s TTPs and trends
• Represent Recorded Future at conferences and events including webinars, speaking engagements, client presentations, scoping calls, and media engagements
• Work collaboratively across internal teams to help lead Recorded Future’s collection, sourcing, research, and reporting capabilities

What you’ll bring to the Threat Intelligence Analyst role (required):

• 7+ years of professional experience in cyber intelligence, cyber investigations, or similar
• Experience with analytic tradecraft, the intelligence cycle, open-source intelligence gathering techniques, and strong intelligence writing skills, techniques, and methodologies
• Familiarity with legal and regulatory requirements for acquisition of digital information and the standards for collecting digital evidence under US Federal laws
• Extensive experience conducting investigations on the darknet with a focus on topics such as leaked databases and credentials, fraud techniques, DDoS operations, bot networks, criminal marketplaces and other current and emerging threats
• Deep understanding of the operations, communications, and motivating factors of cybercriminals
• Understanding of most computer operating systems, networking concepts, and security fundamentals, including anonymization techniques
• Understanding blockchain and cryptocurrency technologies and experience researching the movement of those funds

Additional skills/experience (preferred but not required):

• Foreign language proficiency (preference for Russian, Ukrainian, Chinese, Korean, Belarusian, Arabic, Dutch, French, or Southeast Asian languages)
• BA/BS, MA/MS, or equivalent experience in Computer Science, Computer engineering, Computer programming, Digital Forensics, or similar
• Government or law enforcement experience
• Extensive knowledge of the relationships between cybercriminals, hacktivist, extremist, and nation-state operations and organizations

Apply Now: