Gaming Threat Intelligence Analyst - Fight Cheaters & Fraud

the hive; Greater London; Remote; GBP 80,000 - 117,000; Full time

Job summary

Epic Games seeks a Gaming Threat Intelligence Analyst to identify, investigate, and disrupt cheaters, fraud operations, and account sellers targeting its games. You will track actors, compile evidence for takedowns, and collaborate with Legal to support enforcement across Epic’s ecosystem.

The role requires strong OSINT, experience with threat intel platforms, and the ability to work with external partners. Occasional on-call rotation is expected as part of incident response.

Qualifications

• 4+ years of experience in threat intelligence, online investigations, anti-cheat, fraud, or trust and safety.
• Strong OSINT skills and pivoting on handles, accounts, domains, and hosting.
• Experience with threat intelligence platforms such as Flashpoint or Recorded Future.
• Comfortable querying data in SQL or Splunk, with basic Python.

Responsibilities

• Investigate cheat developers, sellers and resellers, account sellers, tournament cheaters, DDoS providers, and exploit developers targeting Epic's games.
• Identify the people, networks, and infrastructure behind cheat products and fraud schemes, not only the products themselves.
• Investigate fraud and abuse across the ecosystem, including V-Bucks fraud, Support-A-Creator fraud, and map payout fraud.
• Monitor cheat communities and underground markets for new features, techniques, and trends, and feed findings into technical mitigations and enforcement decisions.

Skills

Threat intelligence

Online investigations

OSINT

SQL

Splunk

Python (basic)

Jira

Report writing

Tools

Flashpoint

Recorded Future

Job description

Epic Games seeks a Gaming Threat Intelligence Analyst to identify, investigate, and disrupt cheaters, fraud operations, and account sellers targeting its games. You will track actors, compile evidence for takedowns, and collaborate with Legal to support enforcement across Epic’s ecosystem.

The role requires strong OSINT, experience with threat intel platforms, and the ability to work with external partners. Occasional on-call rotation is expected as part of incident response.