Threat Researcher

Infoblox; Porto Alegre; Hybride; BRL 120 000 - 190 000; Plein temps

Résumé du poste

Infoblox is seeking a Threat Researcher to join the ART in Brazil, reporting to the Threat Intelligence Supervisor. You will conduct investigations into external cyber threats, including phishing, fraud, and malware, transforming evidence into actionable intelligence for customers and internal teams.

You will collaborate with Threat Intelligence, Engineering, and Product teams to expand coverage, improve workflows, and support AI-assisted research. Strong English; Portuguese/Spanish an advantage.

Qualifications

• 2+ years in cyber threat intelligence, threat hunting, or related cybersecurity field.
• Experience investigating phishing, fraud, brand abuse, or malware.
• Knowledge of IOC, attack infrastructure, TTPs, and risk analysis.
• Experience with OSINT tools and threat intelligence sources.

Responsabilités

• Conduct end-to-end cyber threat investigations across phishing, fraud, and malware.
• Hunt for artifacts on deep/dark web, underground forums, and authorized sources.
• Analyze URLs, domains, IPs, hashes, credentials, and files for malicious activity.
• Enrich indicators with OSINT sources and threat intelligence feeds.
• Map infrastructure of phishing, fraud, and malware campaigns.
• Query internal data to identify patterns and quantify exposure.
• Document methods, evidence, and conclusions with clear traceability.
• Produce concise, evidence-based intelligence reports and executive summaries in English.

Connaissances

Threat intelligence

Threat hunting

Fraud analysis

Digital risk protection

SOC operations

Incident response

OSINT investigations

Data analysis

Formation

Bachelor’s degree in Cybersecurity or related field

Outils

VirusTotal

URLScan

WHOIS

Passive DNS

Certificate Transparency logs

Sandboxes

Description du poste

Please review our Career Ladders on the Career Hub to view roles side-by-side.

At Infoblox, every breakthrough begins with a bold “what if.”

What if your ideas could ignite global innovation?

What if your curiosity could redefine the future?

We invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career.

How we empower our people is extraordinary: we’re recognized as a Glassdoor Best Place to Work 2025, Great Place to Work-Certified in five countries, and honored by Cigna as a Healthy Workforce honors for three consecutive years; and what we build is world class: named CybersecAsia’s Best in Critical Infrastructure 2024 — clear evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next.”

In a world where you can be anything, Be Infoblox.

Threat Researcher

We have an opportunity for a Threat Researcher to join our ART (Axur Research Team) in Home office - Brazil, reporting to the Supervisor, Threat Intelligence. In this role, you will conduct investigations and research into external cyber threats, including phishing, fraud, leaked credentials, malicious infrastructure, and threat-actor activity. You will transform evidence from OSINT, underground sources, internal datasets, and customer-provided information into clear, actionable intelligence.

Collaborating closely with Threat Intelligence, Engineering, Automation, Product, and customer-facing teams, you will help expand investigative coverage, improve repeatable workflows, and support AI-assisted research and reporting capabilities. This role is designed for a developing threat researcher who can execute well-defined investigations, strengthen analytical judgment, and contribute to the team’s mission of turning external threat visibility into meaningful protection.

Be a Contributor — What You’ll Do

• Conduct end-to-end cyber threat investigations across phishing, brand abuse, fraud, leaked credentials, malware, and threat-actor activity
• Hunt for relevant artifacts across the deep web, dark web, Telegram channels, underground forums, social platforms, and other authorized sources
• Analyze URLs, domains, IP addresses, hashes, credentials, files, advertisements, and related evidence to identify malicious activity and exposure
• Enrich indicators with OSINT and threat intelligence sources such as VirusTotal, URLScan, WHOIS, passive DNS, Certificate Transparency logs, sandboxes, and community feeds
• Map phishing, fraud, and malware infrastructure by correlating related domains, hosting, certificates, campaigns, accounts, and actor behaviors
• Query internal datasets and approved intelligence platforms to identify patterns, quantify exposure, and connect findings across clients, brands, and campaigns
• Support investigations requiring careful communication, evidence collection, and interaction with threat actors under approved operational-security procedures
• Document investigative methods, evidence, confidence levels, limitations, and conclusions according to team standards
• Produce concise, evidence-based intelligence reports, investigation updates, campaign briefs, and executive summaries in English; Portuguese or Spanish proficiency is an advantage
• Contribute validated indicators, findings, and investigative context to internal intelligence platforms, monitoring workflows, and takedown or remediation processes

Be Prepared — What You Bring

• Two or more years of experience in cyber threat intelligence, threat hunting, fraud analysis, digital risk protection, SOC operations, incident response, OSINT investigations, or a related cybersecurity field
• Practical experience investigating phishing, fraud, brand abuse, leaked data, malicious domains, credentials, malware, or threat actors
• Working knowledge of indicators of compromise, attack infrastructure, tactics, techniques, procedures, and confidence-based analysis
• Experience using OSINT and threat intelligence tools to research domains, IP addresses, URLs, files, identities, infrastructure, or underground activity
• Ability to correlate evidence from multiple sources, distinguish facts from assumptions, and maintain clear source traceability
• Strong written communication skills, with the ability to produce structured, accurate, and actionable intelligence reports
• Familiarity with spreadsheets, structured data, search operators, basic scripting, or query languages such as SQL; Python is an advantage
• Ability to use AI-assisted research and productivity tools thoughtfully, validate generated content, and follow data-protection guidelines
• Ability to collaborate effectively, manage priorities across multiple investigations, ask for guidance, and incorporate feedback
• Bachelor’s degree or equivalent practical experience in Cybersecurity, Computer Science, Information Technology, Intelligence, Journalism, Languages, or a related field; relevant certifications or training are beneficial

Be Successful — Your Path