Senior Threat Intelligence Research Lead

Alice; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Alice in London is seeking a Senior Threat Intelligence Researcher to lead technical threat research, author analytical reports, and monitor ongoing and emerging threats to stay ahead of adversaries.

The role requires deep CTI expertise, experience with OSINT/WEBINT methods, darkweb intelligence, and proficiency in communicating complex findings to clients and stakeholders. Collaboration with analysts and client account leads is essential.

Qualifications

• Must have experience in technical CTI threat hunting and databases/IPv4/IPv6 intelligence
• Experience with threat hunting platforms: VirusTotal, UrlScan, Greyhat Warfare, Shodan
• Experience in analyzing threat groups and actors using OSINT, WEBINT methodologies
• Darkweb and Cybercrime intelligence experience
• Strong English communication skills: ability to clearly communicate intelligence by writing reports or briefing clients
• Proven ability to gather and evaluate internet information from social media, chats and darknet forums
• Great verbal and written communication skills

Responsibilities

• Hunting, detecting, monitoring, and researching threats against Alice clients
• Analysis of threat groups and TTPs across different fraudulent ecosystems
• Researching and monitoring multiple sources through the clear, deep, and the dark web
• Produce technical reports for clients describing threat actor TTPs, analysis and exploits relevant for Alice’s clients
• Review, enrich and provide analyst tradecraft for other team members as part of the delivery process

Skills

Threat hunting

OSINT/WEBINT

Darkweb intelligence

Strong communication

Tools

VirusTotal

UrlScan

Greyhat Warfare

Shodan

Intel471

Recorded Future

CyberSixgill

Flashpoint

Job description

Alice in London is seeking a Senior Threat Intelligence Researcher to lead technical threat research, author analytical reports, and monitor ongoing and emerging threats to stay ahead of adversaries.

The role requires deep CTI expertise, experience with OSINT/WEBINT methods, darkweb intelligence, and proficiency in communicating complex findings to clients and stakeholders. Collaboration with analysts and client account leads is essential.