CTI Outbound Reasercher
Core
Investigate threat actors, malicious infrastructure, and emerging campaigns to produce actionable intelligence and reports for government clients.
Role type
Senior Cyber Threat Intelligence Researcher
Builds
Actionable threat intelligence, detection rules, watchlists, and public research reports
Domain
National Cyber Defense / Cyber Threat Intelligence
Required skills
Threat actor investigation, Adversary infrastructure research, Malware analysis, IOC validation, Intelligence reporting, Analytical writing, Community relationship building, OSINT tool usage, Structured analytical techniques, Python scripting
Preferred skills
Neo4j, Elasticsearch, STIX 2.1, MITRE ATT&CK, Published threat research, Conference speaking
Technologies
VirusTotal, DNSDB, Censys, Shodan, SecurityTrails, MISP, OpenCTI, Neo4j, Elasticsearch, Python
Responsibilities
Conduct investigations into threat actors, adversary infrastructure, malware campaigns, vulnerabilities, and emerging activity; Expand investigations by analyzing relationships among domains, IP addresses, autonomous systems, certificates, passive DNS records, files, URLs, hosting providers, and registration data; Form and test intelligence hypotheses, assess attribution, and distinguish confirmed evidence from analytical judgments; Identify, validate, prioritize, and track Indicators of Compromise (IOCs) and translate findings into detections, hunting opportunities, watchlists, and early-warning intelligence; Write threat research reports, technical blogs, campaign analyses, executive briefs, and customer-facing publications; Build trusted relationships with researchers, security vendors, CERTs, CSIRTs, ISACs, academic teams, and other CTI partners; Collaborate with Engineering, MLOps, Data, and Product teams on scalable intelligence capabilities
Seniority
Senior, hands-on IC
