Junior Collections Analyst

DarkOwl; Denver (CO); On-site; USD 80,000 - 110,000; Full time

Job summary

DarkOwl, LLC is seeking a data collection and intelligence analyst to source, process, and curate leaked datasets from darknet and dark web sources. You will monitor messaging apps, evaluate new sites, and collaborate with engineering to improve pipelines.

The role requires familiarity with the dark web, OPSEC principles, and experience handling large data sets. You will work closely with Customer Success and Intelligence teams to prioritize sources and deliver high-quality insights.

Qualifications

• Familiar with the dark web/darknet ecosystems and stolen data landscape.
• Apply OPSEC principles consistently when accessing dark web environments.
• Experience with Telegram as a data source and monitoring relevant channels.
• Demonstrated ability to work with large data sets, including normalization/processing tasks.
• Comfort with command-line environments (Linux or Mac) and internal tooling.
• Strong attention to detail and ability to assess data quality and relevance.
• Ability to manage multiple collection tasks in a fast-paced environment.

Responsibilities

• Source, collect, and process leaked data sets from darknet and dark web sources, ensuring completeness and accuracy.
• Monitor and collect relevant messaging app content for ingestion into internal systems.
• Discover and evaluate new dark web sites relevant to customer intelligence needs.
• Use in-house tools to manage collection workflows and normalize data into standardized formats.
• Develop personas for accessing dark web forums and platforms with OPSEC-first mindset.
• Flag anomalies; review collected content for quality, relevance, and accuracy.
• Provide contextual/enrichment information to support downstream analysis and deliverables.
• Collaborate with Customer Success and Intelligence teams to prioritize collection around customer sources.
• Work with engineering to report tool issues and improve pipelines.
• Stay current with trends in the stolen data ecosystem and darknet activity.

Skills

Dark web familiarity

OPSEC principles

Telegram data source

Large data sets processing

CLI / Linux

Attention to detail

Multitasking

Tools

Linux

Bash scripting

OSINT tools

Job description

Duties/Responsibilities:

• Source, collect, and process leaked data sets from darknet and dark web adjacent sources, ensuring completeness and accuracy.
• Monitor, identify, and collect relevant messaging app content, processing content for ingestion into internal systems.
• Actively discover and evaluate new dark web sites that are relevant to customer intelligence requirements.
• Use in-house tools to manage collection workflows and normalize large, heterogeneous data sets into standardized formats.
• Develop and maintain personas for accessing dark web forums, markets, and platforms with an OPSEC-first mindset.
• Review collected content for quality, relevance, and accuracy, flagging anomalies or issues to senior analysts.
• Provide contextual and enrichment information for collected data to support downstream analysis and customer deliverables.
• Work with the Customer Success and Intelligence teams to prioritize collection efforts around customer-relevant sources.
• Collaborate with engineering to report tool issues and contribute feedback for improving internal processing pipelines.
• Stay current with developments in the stolen data ecosystem, including emerging leak sites, threat actor activity, and dark web trends.

Required Skills/Abilities:

• Familiarity with the dark web, darknet ecosystems, and the stolen data landscape, including leak sites, forums, and marketplaces.
• Understanding of OPSEC principles and ability to apply them consistently when accessing dark web environments.
• Experience with or strong understanding of Telegram as a data source, including how to identify and monitor relevant channels.
• Demonstrated ability to work with large data sets, including basic data normalization, cleaning, and processing tasks.
• Comfort working with command-line environments (Linux or Mac) and internal tooling.
• Curiosity and self-motivation to independently explore and surface new relevant darknet sources.
• Strong attention to detail and ability to assess data quality and relevance.
• Ability to thrive in a fast-paced environment and manage multiple collection tasks simultaneously.

Preferred Skills/Abilities:

• Scripting skills in Python and/or Bash for task automation and data processing.
• Experience with OSINT tools and techniques for surfacing and verifying data sources.
• Familiarity with cybersecurity concepts, cybercrime ecosystems, hacking methodology, or data forensics.
• Prior experience creating or managing personas on deep web, darknet, or encrypted chat platforms.
• Exposure to data pipeline tools or experience working alongside engineering teams.
• Basic understanding of database concepts and structured data formats (e.g., CSV, JSON, SQL).

Education and Experience:

0-2 years of experience in an analyst, data collection, intelligence, or related role. Relevant coursework, self-directed learning, or demonstrable experience in darknet research, OSINT, or cybersecurity will be considered in lieu of formal work experience.