Senior Network Intelligence Analyst

Recorded Future; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

Recorded Future’s Insikt Group seeks an experienced Sr. Network Intelligence Analyst to conduct research on large-scale network telemetry, focusing on NetFlow data and adversary infrastructure to support national security and public-sector missions.

You will deliver well-sourced intelligence and collaborate with globally distributed analysts. Ideal candidates have 5+ years in intelligence or cyber analysis, strong IP networking knowledge, and experience with OSINT tools.

Qualifications

• 5+ years as an intelligence analyst, cyber analyst, network analyst, or in a similar analytical role.
• Hands-on experience analyzing network telemetry at scale, including NetFlow or equivalent flow-based data.
• Strong understanding of IP networking, routing, autonomous systems, and internet infrastructure.
• Demonstrated ability to independently investigate analytical questions and produce clear, well-sourced intelligence assessments for decision-makers.
• Experience applying the intelligence cycle, structured analytical techniques, and analytic writing methodologies.

Responsibilities

• Analyze large-scale network telemetry, including NetFlow and related flow-based data, to identify malicious infrastructure, command-and-control activity, scanning behavior, and adversary tradecraft.
• Research and track threat actor infrastructure across IP space, autonomous systems, hosting providers, and geographic regions relevant to government and national security stakeholders.
• Produce clear, well-sourced intelligence reports and assessments in response to government customer requests for information and priority intelligence requirements.
• Independently carry out defined research assignments, developing analytical approaches and delivering findings within agreed scope and timelines.
• Contribute to longer‑term network intelligence research projects, collaborating with analysts across Insikt Group on work for government audiences and the broader intelligence community.
• Work with other Insikt Group analysts, product teams, and reviewers to maintain analytic rigor, sourcing standards, and intelligence tradecraft.
• Apply structured analytical techniques to assess observed network activity, evaluate alternative explanations, and communicate confidence levels, intelligence gaps, and potential implications for public‑sector missions and critical services.
• Provide specialized network intelligence expertise in internal reviews and briefings, including constructive feedback on colleagues’ analysis.
• Participate in external engagements, including presenting intelligence findings and responding to analytical questions from government customers, partners, and intelligence community audiences.

Skills

NetFlow analysis

Flow-based data

IP networking

Analytical writing

OSINT tools

Audience communication

Education

Bachelor's degree in CS/Engineering

Tools

OSINT tools

NetFlow tools

Job description

With 1,000+ intelligence professionals serving over 1,900 clients worldwide, Recorded Future is the world’s most advanced, and largest, intelligence company!

The Insikt Group within Recorded Future delivers intelligence across the cyber, geopolitical, and physical threat domains in support of government and public-sector missions worldwide. The Global Network Intelligence team focuses on large-scale internet telemetry, traffic analysis, and adversary infrastructure to understand, track, and expose malicious activity affecting national security, critical infrastructure, and public institutions.

Based in the Middle East, you will conduct research and analysis using flow-based network telemetry to identify, assess, and explain malicious infrastructure, threat actor behavior, and emerging risks. Your work will support government customer intelligence requirements and operational decision-making, with a primary focus on threats affecting public-sector organizations, critical infrastructure, and allied nations.

As an experienced individual contributor, you will independently deliver analytical work aligned with agreed research priorities, collaborate with colleagues across Insikt, and communicate findings to both technical and non-technical audiences.

What You’ll Do - Sr. Network Intelligence Analyst

• Analyze large-scale network telemetry, including NetFlow and related flow-based data, to identify malicious infrastructure, command-and-control activity, scanning behavior, and adversary tradecraft.
• Research and track threat actor infrastructure across IP space, autonomous systems, hosting providers, and geographic regions relevant to government and national security stakeholders.
• Produce clear, well-sourced intelligence reports and assessments in response to government customer requests for information and priority intelligence requirements.
• Independently carry out defined research assignments, developing analytical approaches and delivering findings within agreed scope and timelines.
• Contribute to longer‑term network intelligence research projects, collaborating with analysts across Insikt Group on work for government audiences and the broader intelligence community.
• Work with other Insikt Group analysts, product teams, and reviewers to maintain analytic rigor, sourcing standards, and intelligence tradecraft.
• Apply structured analytical techniques to assess observed network activity, evaluate alternative explanations, and communicate confidence levels, intelligence gaps, and potential implications for public‑sector missions and critical services.
• Provide specialized network intelligence expertise in internal reviews and briefings, including constructive feedback on colleagues’ analysis.
• Participate in external engagements, including presenting intelligence findings and responding to analytical questions from government customers, partners, and intelligence community audiences.

What You’ll Bring - Sr. Network Intelligence Analyst

• 5+ years of experience as an intelligence analyst, cyber analyst, network analyst, or in a similar analytical role.
• Strong hands‑on experience analyzing network telemetry at scale, including NetFlow or equivalent flow‑based data.
• A strong understanding of IP networking, routing, autonomous systems, and internet infrastructure, and the ability to apply that knowledge to infrastructure analysis.
• Demonstrated ability to independently investigate analytical questions and produce clear, well‑sourced intelligence assessments for decision‑makers.
• Experience applying the intelligence cycle, structured analytical techniques, and analytic writing methodologies.
• Proficiency with open‑source intelligence tools and data sources relevant to network and infrastructure analysis.
• Ability to explain technical findings, analytical judgments, and limitations to technical and non‑technical audiences.
• Ability to manage assigned work against agreed priorities and deadlines, incorporate feedback, and collaborate effectively within a globally distributed research team.

Additional (Preferred) Qualifications

• Background in Computer Science, Computer Engineering, Information Security, or a related discipline.
• Familiarity with threats to critical infrastructure sectors such as energy, telecommunications, transportation, or government services.
• Knowledge of state‑sponsored cyber activity and advanced persistent threat ecosystems.
• Experience supporting government, defense, law enforcement, or intelligence community customers.
• Experience briefing government stakeholders or contributing analysis to intelligence products developed with partner organizations.
• Proficiency in a regional language, particularly Arabic, to support collaboration with customers and partners across the Middle East.

#LI-Remote

Why should you join Recorded Future?

Recorded Future employees (or "Futurists"), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication to empowering clients with intelligence to disrupt adversaries has earned us a 4.6‑star user rating on G2 and more than 50% of Fortune 100 companies as customers.

Want more info?

Blog & Podcast: Learn everything you want to know (and maybe some things you'd rather not know) about the world of cyber threat intelligence
Linkedin, Instagram, Twitter: What's happening at Recorded Future
The Record: The Record is a cybersecurity news publication that explores the untold stories in this rapidly changing field
Timeline: History of Recorded Future
Recognition: Check out our awards and announcements

We are committed to maintaining an environment that attracts and retains talent from a diverse range of experiences, backgrounds and lifestyles. By ensuring all feel included and respected for being unique and bringing their whole selves to work, Recorded Future is made a better place every day.

If you need any accommodation or special assistance to navigate our website or to complete your application, please send an e‑mail with your request to our recruiting team at [e-mail]

Recorded Future is an equal opportunity and affirmative action employer and we encourage candidates from all backgrounds to apply. Recorded Future does not discriminate based on race, religion, color, national origin, gender including pregnancy, sexual orientation, gender identity, age, marital status, veteran status, disability or any other characteristic protected by law.

Recorded Future will not discharge, discipline or in any other manner discriminate against any employee or applicant for employment because such employee or applicant has inquired about, discussed, or disclosed the compensation of the employee or applicant or another employee or applicant.

Recorded Future does not administer a lie detector test as a condition of employment or continued employment. This is in compliance with the law of the Commonwealth of Massachusetts, and in alignment with our hiring practices across all jurisdictions.

Recorded Future maintains a drug‑free workplace.

Note: Our interview process for all final‑round candidates requires a mandatory in‑person interview or a live, scheduled video conference with the hiring manager. We do not conduct interviews via instant messaging or text. All communications during the application process will come from individuals within our HR department via their Recorded Future email address.