Cyber Threat Researcher

Accountabilities:

• Identify intelligence and knowledge gaps and develop research leads that address customer intelligence collection requirements.
• Continuously monitor open and restricted-access sources, including underground forums, marketplaces, instant messaging groups, and other cybercriminal ecosystems.
• Research threat actors and groups to understand their motivations, objectives, targets, capabilities, behaviors, and tactics, techniques, and procedures (TTPs).
• Proactively track financially motivated cyber threat actors and conduct research to identify and attribute relevant activity.
• Conduct virtual human intelligence (vHUMINT) collection activities within cybercrime-focused environments where appropriate.
• Develop and manage research personas while maintaining strong operational security and OPSEC practices.
• Contribute to specialized research projects involving cybercriminal infrastructure, malware campaigns, cybercriminal commodities, compromised data, and related underground activity.
• Collaborate with other researchers and intelligence professionals on complex investigations and emerging threat topics.
• Communicate research findings, intelligence collection results, and analytical assessments through clear, concise, and actionable reporting in English.
• Respond to customer Requests for Information (RFIs) and provide timely support for ad-hoc intelligence requests from internal teams.
• Proactively identify emerging developments within the cybercrime ecosystem and contribute them to broader intelligence efforts.
• Work independently on proactive research initiatives while maintaining close collaboration with the wider global research team.

Requirements:

• Demonstrated professional experience in cyber threat research, cybercrime investigation, threat intelligence, or a closely related field.
• In-depth understanding of the cyber threat landscape, including threat actors, criminal groups, motivations, objectives, tools, capabilities, risks, attacks, and campaigns.
• Previous hands-on experience monitoring and researching cybercrime underground environments, including restricted-access forums, marketplaces, instant messaging channels, and other criminal ecosystems.
• Strong understanding of operational security (OPSEC), particularly when conducting research within cybercriminal environments.
• Experience creating, developing, and managing personas for intelligence collection in cybercrime-focused environments is highly valued.
• Hands-on experience with virtual human intelligence (vHUMINT) collection methods is an advantage.
• Technical knowledge of malware analysis, exploits, vulnerabilities, or related cybersecurity topics is beneficial.
• Strong investigative, analytical, and critical-thinking skills, with the ability to identify meaningful intelligence from large volumes of information.
• Ability to work independently and proactively with limited direction while also contributing effectively within a close-knit global team.
• Excellent written, verbal, and interpersonal communication skills in English.
• Professional proficiency in at least one additional language: Portuguese, Spanish, Italian, or French.
• Strong ability to produce clear, concise, and actionable intelligence reporting for technical and non-technical audiences.
• A degree in Cybersecurity, Intelligence Analysis, Computer Science, or a related discipline is highly desirable.
• Curiosity, discretion, integrity, attention to detail, and a strong sense of professional responsibility are essential for working with sensitive intelligence.
• Comfortable operating in a fast-paced environment where priorities and threat landscapes can evolve quickly.

Benefits:

• Market-competitive compensation.
• Fully remote opportunity for candidates based in Europe or LATAM.
• Remote-friendly culture built around trust, collaboration, and autonomy.
• Wellness programs supporting employee health and well-being.
• Employee recognition program.
• Multiple professional development and learning opportunities.
• Opportunity to work alongside experienced cybersecurity and intelligence professionals.
• Exposure to complex, real-world cybercrime investigations and emerging threat activity.
• Collaborative, inclusive, and supportive international work environment.
• Opportunity to contribute to a mission-driven cybersecurity function focused on helping organizations proactively understand and mitigate threats.
• Culture centered on openness, inclusion, integrity, client focus, and continuous growth.