Remote CTI Specialist — Elite Threat & Fraud Research

Alice; Polska; Hybrid; PLN 175,000 - 279,000; Part time

Job summary

Alice.io is seeking an expert CTI Specialist to lead OSINT/WEBINT investigations for top digital platforms. You’ll cover the clearnet, darknet, and messaging spaces, focusing on threat intelligence, malware trends, fraud detection, and illicit communities.

The role is project-based, remote, with about 80 hours per month. Candidates should have 3+ years in CTI or fraud analysis and strong OPSEC and data-analysis skills.

Qualifications

• 3+ years of experience in intelligence analysis, CTI, or fraud detection.
• Strong knowledge of OSINT/WEBINT research methodologies (social media, apps, forums, darknet).
• Understanding of cyber threat trends (data leaks, malware, blackhat/grey-hat spaces) and fraud mechanisms.
• Strong understanding of OPSEC principles.
• Ability to analyze large datasets and present complex findings clearly.

Responsibilities

• Conduct in-depth OSINT/WEBINT investigations across clearnet, darknet, and messaging platforms.
• Analyze online patterns and identify emerging cyber threats and fraud mechanisms.
• Monitor threat actor communities, data leaks, and malware trends.
• Uncover fraud tactics, process bypasses, and abuse methods.
• Prepare structured reports with actionable recommendations.
• Collaborate asynchronously with the research team.

Skills

OSINT/WEBINT research

CTI

Fraud detection

Threat actor tracking

Malware analysis

Data leak monitoring

Darknet research

OPSEC principles

Data analysis

Automation tools

Scripting

Tools

Automation tools

Scripting

Job description

Alice.io (formerly known as ActiveFence) is a leading trust, safety, and security company. Just like 'Alice' herself, we go down the rabbit hole into the emerging world of AI and focus on safeguarding these technologies. In a world where AI has fundamentally changed the nature of risk, Alice offers coverage across the entire AI lifecycle.

We're currently on the ground floor of an exciting new initiative: building an "Elite Collective" of the world's premier Cyber Threat experts—high-stakes, project-based work for the "best of the best" threat and fraud specialists in the industry.

Work is on-demand and project-dependent, scaling up and down based on the needs of the client. This is not a high-volume, repetitive role; it is an opportunity to be tapped for specific, high-impact interventions when your unique expertise is required.

The most sophisticated technology challenges in the world are waiting down the rabbit hole. We're looking for the sharpest minds to help us secure the frontier.

The invitation is open: Come join us at the tea party.

About the Position

As one of Alice's CTI Specialists, you'll conduct in-depth OSINT/WEBINT investigations to detect and mitigate online threats for some of the world's largest digital platforms. Your work will span the clearnet, darknet, and messaging platforms - focusing on threat intelligence, malware trends, fraud detection, and illicit communities.

We are seeking experts with strengths in one or more of the following areas:

Cyber Threat Intelligence - Threat actor tracking, malware analysis, data leak monitoring, darknet research

Fraud Analysis - Fraud tactics, process bypasses, abuse methods, financial crime patterns

• Commitment: Approximately 80 hours per month
• Duration: Project-based (on-demand)
• Schedule: Flexible hours, asynchronous collaboration
• Location: Remote

Key Responsibilities

• Conduct in-depth OSINT/WEBINT investigations across clearnet, darknet, and messaging platforms
• Analyze online patterns and identify emerging cyber threats and fraud mechanisms
• Monitor threat actor communities, data leaks, and malware trends
• Uncover fraud tactics, process bypasses, and abuse methods
• Prepare structured reports with actionable recommendations
• Collaborate asynchronously with the research team

Requirements

• 3+ years of experience in intelligence analysis, CTI, or fraud detection
• Strong knowledge of OSINT/WEBINT research methodologies (social media, apps, forums, darknet)
• Understanding of cyber threat trends (data leaks, malware, blackhat/grey-hat spaces) and fraud mechanisms
• Strong understanding of OPSEC principles
• Ability to analyze large datasets and present complex findings clearly

Preferred Qualifications

• Native or near-native fluency in Chinese or Russian, including online terminology used in threat actor communities
• Experience conducting red team exercises to uncover abuse methods and bypass mechanisms
• Platform familiarity with social media, apps, and forums frequented by threat actors
• Experience with automation tools or scripting for research efficiency
• Background in law enforcement, military intelligence, or corporate security

All applicants will be required to complete a screening exam and background check.

About Alice

Alice is a trust, safety, and security company built for the AI era. We safeguard the communicative technologies people use to create, collaborate, and interact- whether with each other or with machines.

In a world where AI has fundamentally changed the nature of risk, Alice provides end-to-end coverage across the entire AI lifecycle. We support frontier model labs, enterprises, and UGC platforms with a comprehensive suite of solutions: from model hardening evaluations and pre-deployment red-teaming to runtime guardrails and ongoing drift detection.

Alice is widely considered a global leader in online safety and AI security. We have some of the most forward-thinking and passionate minds in the world working to safeguard over 3 billion users across the largest AI and tech platforms.

If you're creative and driven to secure the future of AI, we want to hear from you!

About the Position

Alice.io (formerly known as ActiveFence) is a leading trust, safety, and security company. Just like 'Alice' herself, we go down the rabbit hole into the emerging world of AI and focus on safeguarding these technologies. In a world where AI has fundamentally changed the nature of risk, Alice offers coverage across the entire AI lifecycle.

We're currently on the ground floor of an exciting new initiative: building an "Elite Collective" of the world's premier Cyber Threat experts—high-stakes, project-based work for the "best of the best" threat and fraud specialists in the industry.

Work is on-demand and project-dependent, scaling up and down based on the needs of the client. This is not a high-volume, repetitive role; it is an opportunity to be tapped for specific, high-impact interventions when your unique expertise is required.

The most sophisticated technology challenges in the world are waiting down the rabbit hole. We're looking for the sharpest minds to help us secure the frontier.

The invitation is open: Come join us at the tea party.

About the Position

As one of Alice's CTI Specialists, you'll conduct in-depth OSINT/WEBINT investigations to detect and mitigate online threats for some of the world's largest digital platforms. Your work will span the clearnet, darknet, and messaging platforms - focusing on threat intelligence, malware trends, fraud detection, and illicit communities.

We are seeking experts with strengths in one or more of the following areas:

Cyber Threat Intelligence - Threat actor tracking, malware analysis, data leak monitoring, darknet research

Fraud Analysis - Fraud tactics, process bypasses, abuse methods, financial crime patterns

• Commitment: Approximately 80 hours per month
• Duration: Project-based (on-demand)
• Schedule: Flexible hours, asynchronous collaboration
• Location: Remote

Key Responsibilities

• Conduct in-depth OSINT/WEBINT investigations across clearnet, darknet, and messaging platforms
• Analyze online patterns and identify emerging cyber threats and fraud mechanisms
• Monitor threat actor communities, data leaks, and malware trends
• Uncover fraud tactics, process bypasses, and abuse methods
• Prepare structured reports with actionable recommendations
• Collaborate asynchronously with the research team

Requirements

• 3+ years of experience in intelligence analysis, CTI, or fraud detection
• Strong knowledge of OSINT/WEBINT research methodologies (social media, apps, forums, darknet)
• Understanding of cyber threat trends (data leaks, malware, blackhat/grey-hat spaces) and fraud mechanisms
• Strong understanding of OPSEC principles
• Ability to analyze large datasets and present complex findings clearly

Preferred Qualifications

• Native or near-native fluency in Chinese or Russian, including online terminology used in threat actor communities
• Experience conducting red team exercises to uncover abuse methods and bypass mechanisms
• Platform familiarity with social media, apps, and forums frequented by threat actors
• Experience with automation tools or scripting for research efficiency
• Background in law enforcement, military intelligence, or corporate security

All applicants will be required to complete a screening exam and background check.

About Alice

THE CHALLENGES ALONG THE WAY

1. Being Both Strategist and Executioner

One of the hardest parts of this role is that you’re both the visionary and the builder; the one drawing the mapandpaving the road.
That means switching between high-level strategy and hands-on experimentation daily, and doing it while bringing others along with you. There’s no playbook for this kind of work. You’re paving an unpaved road, one small experiment at a time.

2. Balancing Security and Innovation

ActiveFence is the leading provider of security and safety solutions for online experiences, safeguarding more than 3 billion users, top foundation models, and the world’s largest enterprises and tech platforms every day.
As a trusted ally to major technology firms and Fortune 500 brands that build user-generated and GenAI products, ActiveFence empowers security, AI, and policy teams with low-latency Real-Time Guardrails and a continuous Red Teaming program that pressure-tests systems with adversarial prompts and emerging threat techniques. Powered by deep threat intelligence, unmatched harmful-content detection, and coverage of 117+ languages, ActiveFence enables organizations to deliver engaging and trustworthy experiences at global scale while operating safely and responsibly across all threat landscapes.