Cyber Threat Intelligence Researcher — Hybrid/Remote

EMW, Inc.; Brussel; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

EMW, Inc. seeks a Cyber Threat Intelligence Researcher to support NATO CTAB, researching threat actors’ TTPs and producing actionable CTI for defense and decision-makers. The role involves scripting, tooling, and translating technical findings into strategic and operational intelligence.

The contractor will work 2 days on-site at NATO HQ Brussels and 3 days remote, under NATO SECRET clearance, with a 2027 baseline and 2028 option, across ~38 hours/week for 42 weeks per year.

Qualifications

• University degree in a quantitative field or 4+ years of equivalent experience.
• Experience analyzing threat actors, TTPs, and cyber campaigns.
• Knowledge of MITRE ATT&CK framework and cyber intelligence lifecycle.

Responsibilities

• Translate threat actor tactics into actionable CTI products and detections.
• Develop detection signatures and contextualize IoCs for defenders.
• Automate threat intel collection, analysis and reporting at scale.

Skills

Threat intelligence

MITRE ATT&CK

Python

Threat actor analysis

Education

Bachelor's degree in CS/Engineering

Tools

CTAB Platform

Scripting

Job description

EMW, Inc. seeks a Cyber Threat Intelligence Researcher to support NATO CTAB, researching threat actors’ TTPs and producing actionable CTI for defense and decision-makers. The role involves scripting, tooling, and translating technical findings into strategic and operational intelligence.

The contractor will work 2 days on-site at NATO HQ Brussels and 3 days remote, under NATO SECRET clearance, with a 2027 baseline and 2028 option, across ~38 hours/week for 42 weeks per year.