Remote Threat Hunter & Intelligence Analyst

GreyNoise Intelligence; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Equity

Health benefits

Remote-first

Mac laptop

Job summary

GreyNoise Intelligence is hiring a Threat Researcher to develop and exploit access sources to produce cyber threat intelligence used to detect, disrupt, and cost adversaries. You will lead hypothesis-driven hunting through telemetry, cluster and attribute threats, and integrate new data sources and tools to form a comprehensive threat picture.

The role requires strong networking, PCAP analysis, and expertise in offensive tooling, open-source intel, and threat frameworks.

Qualifications

• Deep understanding of computer networking fundamentals and protocols.
• Deep technical ability to hunt through network traffic (full PCAP).
• Deep technical skills with offensive tooling and exploitation methodologies against network edge devices.
• Experience in open and commercial source intelligence research (public blogs, datasets).
• Experience with hardware and embedded systems.
• Experience with query languages (SQL).
• Experience producing and tuning detection rules (Suricata, YARA).
• Experience with binary analysis and reverse engineering.
• Experience with cyber threat intelligence frameworks and analytical tradecraft.
• Experience tracking and analyzing threats using graph-based analysis tools (e.g., Synapse).
• Experience using AI (prompt engineering, harness engineering).
• Experience presenting at security conferences.

Responsibilities

• Hypothesis and lead driven hunting through existing data to identify malicious activity.
• Cluster, track, attribute, research, and disrupt threats.
• Develop and integrate new intelligence data sources and tools.
• Produce and disseminate actionable intelligence to customers and the public.

Skills

Networking

PCAP analysis

Offensive tooling

Open-source intel

Hardware & embedded

SQL

Threat detection rules

Binary analysis

Threat intel frameworks

Graph-based analysis

AI applications

Presentations

Tools

Suricata

YARA

SQL

Job description

GreyNoise Intelligence is hiring a Threat Researcher to develop and exploit access sources to produce cyber threat intelligence used to detect, disrupt, and cost adversaries. You will lead hypothesis-driven hunting through telemetry, cluster and attribute threats, and integrate new data sources and tools to form a comprehensive threat picture.

The role requires strong networking, PCAP analysis, and expertise in offensive tooling, open-source intel, and threat frameworks.