Threat Actor Engagement & Intelligence Consultant - Remote (Anywhere in the U.S.)

Handles communications with ransomware and data extortion actors for GuidePoint Security's clients, as part of the GuidePoint Research and Intelligence Team supporting its digital forensics and incident response practice. Working remotely anywhere in the US, the consultant leads threat actor engagements, advises victims, their lawyers and insurers on the risks of each course of action, gathers intelligence along the way, joins DFIR investigations, writes deliverables for technical and executive readers, and contributes to GRIT's ransomware research.

It asks for two to four years communicating with threat actors through negotiation or persona operations, two years of threat intelligence analysis or collection, familiarity with dark web forums and DFIR workflows, and consulting experience. The role includes on-call weekends.