Threat Intelligence Analyst

A threat intelligence analyst on the Threat Research and Analysis team of Recorded Future's Insikt Group, working at least three days a week from the Arlington office. The analyst hunts for nation-state and criminal actor infrastructure, builds methods to identify and signature it, researches actors' tools and TTPs, writes finished intelligence and detections for clients and the public blog, briefs customers and media, and mentors other analysts.

It asks for two years in security or threat intelligence, a solid grasp of C2 and botnet infrastructure, TCP/IP and traffic analysis, tools such as Shodan, Censys, Maltego or DomainTools, and models such as ATT&CK and the Diamond Model; Arabic, Turkish or Farsi and YARA or Suricata skills help.