Senior Dark Web Intelligence Lead — Remote

Recorded Future; United States; On-site; USD 152,000 - 229,000; Full time

Benefits offered by this job

401K

Medical, dental, vision

Job summary

Recorded Future is expanding its dark web collection capability with focus on underground communities where threat actors recruit and transact. You will be the internal authority on how underground communities operate, what to collect, and where not to invest, making strategic judgments and defending them across the organization.

The role is hands-on and operational: you will navigate underground infrastructure, develop access, create personas, and extract intelligence directly, while

Qualifications

• 5+ years of hands-on dark web threat research with demonstrable collection outcomes across forums, marketplaces, or covert channels.
• Deep, current expertise in major criminal forums and darknet markets — operation, access governance, evolution.
• Proven ability to operate within closed or invite-only communities while maintaining OPSEC and legal compliance.
• Russian language proficiency at a professional working level.

Responsibilities

• Serve as the company-wide subject matter expert on dark web and underground community dynamics.
• Make and own strategic collection decisions: forums, markets, and channels to pursue; areas to prioritize.
• Identify, evaluate, and gain access to criminal forums, darknet marketplaces, Telegram channels, and adjacent covert infrastructure.
• Develop and maintain collection strategies, personas, and source documentation.
• Partner with engineering to translate research tradecraft into automated collection pipelines.
• Monitor sources for operational changes and adapt accordingly.
• Produce finished intelligence on threat actors, community dynamics, and emerging underground infrastructure.
• Collaborate across internal teams as the go-to voice on underground community intelligence.

Skills

Dark web threat research

OPSEC & legal compliance

Russian language

Analytical writing

Public speaking

Strategic collection decisions

Python scripting

Tools

Python

Job description

Recorded Future is expanding its dark web collection capability with focus on underground communities where threat actors recruit and transact. You will be the internal authority on how underground communities operate, what to collect, and where not to invest, making strategic judgments and defending them across the organization.

The role is hands-on and operational: you will navigate underground infrastructure, develop access, create personas, and extract intelligence directly, while