Threat Intelligence Researcher (Cloud)

Responsibilities

• Identify, analyze, and track advanced state-backed and financially motivated attackers targeting cloud ecosystems.
• Hunt through diverse data sources to identify malicious campaigns targeting customers.
• Use open and closed data to track infrastructure and malware associated with advanced threat actors.
• Investigate and attribute incidents, campaigns, and threat actors to understand attacker motivations.
• Communicate novel findings to customers and the public.

Requirements

• 5+ years of experience in security or threat research, focused on advanced state-backed actors or sophisticated financially motivated campaigns.
• Proven track record tracking sophisticated threat actors.
• Ability to develop novel and durable methods for identifying and tracking threat actors across multiple datasets.
• Deep subject matter expertise in at least one actor-tracking mechanism, such as malware or infrastructure.
• Experience working with large-scale telemetry, especially infrastructure hunting using query languages and scripting.
• Familiarity with malware analysis and YARA-based malware hunting.
• Willingness to take on multiple roles to build actor-tracking capabilities.

Nice-to-haves

• Knowledge of attacker targeting of AWS, Google Cloud, Azure, Kubernetes, and modern cloud-native architectures.
• Experience building tools that use data sources in a repeatable and scalable manner.
• Track record of publicly communicating novel and newsworthy findings.
• Background in incident response, threat intelligence, or threat hunting.

Compensation and Benefits

• Compensation includes base salary, bonus, equity, and benefits.
• US base salary range: $160,000–$220,000 USD.
• Benefits are provided for this full-time position.