Senior Threat Intelligence Researcher

At Alice, our Cyber Threat Intelligence group thrives on curiosity and deep technical dive capabilities. We are looking for a Senior Threat Intelligence Researcher with a passion for CTI and a background in proxy research/ anti-bot defense/ web-scraping /threat hunting, with a proven ability to take initiative and conduct independent research with a track record of high-level results. In other words, not just an individual contributor, but a true talent that is seeking to make a mark in the industry. You will lead technical threat research, author analytical reports, and proactively monitor ongoing and emerging threats to keep us steps ahead of adversaries.

Responsibilities

• Hunting, detecting, monitoring, and researching threats against Alice clients.
• Analysis of threat groups and TTPs across different fraudulent ecosystems.
• Researching and monitoring multiple sources through the clear, deep, and the dark web.
• Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients. Work closely with client account leads and stakeholders, as well as collaborating with fellow analysts to produce intelligence reports.
• Review, enrich and provide analyst tradecraft for other team members as part of the delivery process. Prepare assessments of current threats and trends based on collection, research and analysis of classified intelligence collected by the teams.

Must Have

• Experience in one of the following fields:
• - Anti-bot detection/research
• - Proxy detection/research
• - Web scraping development/detection/prevention
• Experience in technical CTI threat hunting - databases, IPv4/IPv6 intelligence, 
• Experience with threat hunting platforms: VirusTotal, UrlScan, Greyhat Warfare, Shodan
• Experience in analyzing threat groups and actors using OSINT, WEBINT methodologies
• Darkweb and Cybercrime intelligence experience
• Strong English communication skills: ability to clearly communicate intelligence by writing reports, or briefing clients and other stakeholders
• Must have demonstrated experience in gathering and evaluating internet information from social media, chats and darknet forums
• Great verbal and written communication skills

Nice to Have

• Scripting (Python, BASH, and/or equivalent)
• Experience in operating threat intelligence collection platforms: Intel471, Recorded Future, CyberSixgill, Flashpoint and/or equivalent
• Foreign language proficiency