Global Head of Threat Research & Intelligence

BitSight; Portugal; Remote; EUR 82,000 - 93,000; Full time

Job summary

Bitsight seeks a Head of Threat Research to lead a high-impact team focused on detecting compromised systems worldwide. You will drive innovation in data collection, malware tracking, and domain sinkholing to create one of the world’s largest victim intelligence capabilities.

The role owns malware triage workflows, sets investigation priorities, and champions new product features based on threat telemetry. You will collaborate with product, engineering, and data science to translate signals into

Qualifications

• Broad expertise across malware infrastructure and C2 methodologies.
• Experience building detection rules and extracting IOCs from malware analysis.
• Proven ability to lead high-performing technical teams in security research.
• Experience architecting complex workflows for malware analysis and telemetry collection.
• Strong communication and analytical skills; ability to solve ambiguous problems.
• Proficient in Python or Go scripting.

Responsibilities

• Set research priorities for victim intelligence collection and analysis.
• Mentor malware researchers and analysts to grow the team.
• Develop next-generation emulators, trackers, and crawlers for infection telemetry.
• Advance research into C2 channels (P2P, direct IP, hybrid) to monitor botnets.
• Ensure data quality of victim intelligence and drive improvements.
• Collaborate with product/engineering/data science to translate telemetry into features.

Skills

Malware research

C2 methodologies

Team leadership

Threat intelligence

Data analysis

Scripting

Education

B.S. in Computer Science

Tools

Python

Go

Job description

Bitsight seeks a Head of Threat Research to lead a high-impact team focused on detecting compromised systems worldwide. You will drive innovation in data collection, malware tracking, and domain sinkholing to create one of the world’s largest victim intelligence capabilities.

The role owns malware triage workflows, sets investigation priorities, and champions new product features based on threat telemetry. You will collaborate with product, engineering, and data science to translate signals into