Ransomware Threat Intelligence Consultant (Remote)

IllTip; United States; A distancia; USD 90.000 - 150.000; Jornada completa

Descripción de la vacante

IllTip is a remote, client-facing threat intelligence and digital forensics consulting role serving Fortune 500 firms and government agencies. You will engage with threat actors during ransomware and data extortion cases, gather intelligence, and advise victims on sound actions.

The position emphasizes turning engagement findings into operational threat intelligence. The role requires building automation, supporting DFIR investigations, and delivering clear engagement deliverables for technical

Formación

• 2–4 years experience communicating with threat actors
• At least 2 years in threat intelligence analysis or collection
• Experience building persona operations and working with dark web forums/ marketplaces
• Familiarity with DFIR workflows, processes and deliverables
• Prior consulting or client-facing professional services experience
• Experience using AI tools; U.S. residency required

Responsabilidades

• Lead threat actor communications for ransomware and data extortion cases, advising clients, legal counsel and insurance carriers on risks and options
• Support active digital forensics and incident response investigations by identifying and sharing actionable intelligence
• Author clear engagement deliverables for both technical and executive audiences, including findings, business impact and realistic remediation steps
• Build automation and scripting that streamline intelligence workflows and expand team capabilities
• Contribute to the evaluation and integration of open-source and commercial threat intelligence tools
• Participate in a rotating on-call schedule, including occasional weekend work for emergencies

Conocimientos

Threat actor communication

Threat intel analysis

Persona operations

Dark web research

DFIR workflows

Client-facing

AI tools

Descripción del empleo

IllTip is a remote, client-facing threat intelligence and digital forensics consulting role serving Fortune 500 firms and government agencies. You will engage with threat actors during ransomware and data extortion cases, gather intelligence, and advise victims on sound actions.

The position emphasizes turning engagement findings into operational threat intelligence. The role requires building automation, supporting DFIR investigations, and delivering clear engagement deliverables for technical