Senior Threat Intelligence Analyst

A senior threat intelligence analyst at ID.me who tracks the criminal ecosystem attacking identity verification: sellers of stolen credentials and forged documents, deepfake and camera-injection tools, synthetic identity brokers and account takeover crews. The analyst owns a portfolio of actors or fraud types end to end, sets collection priorities, conducts sustained deep and dark web collection under sound operational security, hunts for new activity, writes finished assessments for engineers, executives and government partners, turns findings into detections and fraud controls, builds tooling and mentors other analysts.

ID.me wants five or more years in threat, fraud or hunting intelligence producing finished assessments, three or more of hands-on dark web collection, applied use of ATT&CK and the Diamond Model, and strong writing. Identity fraud experience, SQL and Python, and GCTI or similar certifications are preferred.