Principal Dark Web Collection Analyst
Core
Internal authority and hands-on operator for Recorded Future's dark web collection, managing access to underground communities and producing intelligence on threat actors and infrastructure.
Role type
Principal Dark Web Collection Analyst (Strategic IC)
Builds
Automated collection pipelines, finished intelligence reports, and strategic source access for Recorded Future's clients.
Domain
Cyber Threat Intelligence / Dark Web / Underground Economy
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery
Required skills
Dark web threat research, underground community dynamics, OPSEC, Russian language proficiency, analytical writing, public speaking, basic Python scripting
Preferred skills
Additional underground languages (Ukrainian, Romanian, Chinese, Portuguese, Arabic), cybercrime research background, law enforcement or threat intel vendor experience
Technologies
Python, Telegram, Darknet marketplaces, Criminal forums
Responsibilities
Make strategic decisions on which forums and channels to pursue; identify and gain access to criminal forums and covert infrastructure; develop and maintain collection strategies and personas; partner with engineering to build automated pipelines; monitor sources for operational changes; produce intelligence on threat actors and community dynamics; represent the company externally via blogs and webinars.
Seniority
Principal, strategic decision-making with hands-on execution
