Senior Security Researcher - CTJ - Secret
Core
Lead attribution and threat actor analysis by collecting, modeling, attributing, and documenting intelligence to support US government agencies.
Role type
Senior Security Researcher (Threat Intelligence & Attribution)
Builds
Actionable intelligence reports, executive briefings, and customer-facing presentations on threat activity.
Domain
Cybersecurity, Threat Intelligence, Adversary Attribution
Required skills
Threat actor analysis, attribution modeling, Diamond Model of Intrusion Analysis, TTP characterization, malware triage, log analysis, query languages (KQL/Kusto, SQL), SIEM/telemetry analysis, incident response support, cloud/identity/endpoint telemetry analysis, automation/AI tooling for triage, executive briefing delivery
Preferred skills
Detection engineering, hunting query development, experience with financially motivated or state-sponsored adversaries, cloud and identity-based intrusion knowledge (token theft, OAuth abuse)
Technologies
KQL, Kusto, SQL, SIEM, OAuth, SaaS platforms
Responsibilities
Collect, model, and attribute intelligence from investigations; partner with incident response teams; communicate findings to technical and executive audiences; support customer notifications on threat activity; develop methods to discover and track adversary infrastructure and campaigns.
Seniority
Senior, hands-on IC
