Senior Threat Intelligence Analyst

recordedfuture; United States; Remote; USD 129,000 - 194,000; Full time

Benefits offered by this job

Equity

Health insurance

Retirement plan

Incentive pay

Job summary

Recorded Future is recruiting for a remote senior cyber intelligence analyst to research criminal activity across underground communities, producing intelligence on threat actors, campaigns, tools, and cybercrime trends. You’ll blend proactive open-source research with source development and fulfill internal and customer requests.

You will write comprehensive intelligence reports and concise notes, develop sources, and use AI-assisted workflows to manage high volumes of data while ensuring

Qualifications

• Professional fluency in Russian.
• Three years or more experience in cyber intelligence, cybersecurity, investigations, or a related field.
• Strong intelligence tradecraft and OSINT methods; able to explain findings to customers or at conferences.
• Hands-on experience with underground sources, covert operations, sensitive information, and high-level operational security practices.
• Knowledge of cybercrime ecosystems, regional activity, tactics, fraud, money laundering, and links among criminal, hacktivist, extremist, and state-backed operations.
• Experience handling, tracing, and investigating cryptocurrency transactions, including blockchain research.
• Regular use of AI tools in research or writing; ability to prompt and verify outputs for accuracy.
• A relevant degree or equivalent experience; practical experience applying large language models in analysis workflows.
• Ability to work collaboratively across locations.

Responsibilities

• Investigate activity on underground forums, marketplaces, shops, and private channels; track actors, tactics, campaigns, and trends.
• Write finished intelligence reports and shorter analyst notes for customers and public audiences.
• Identify and develop sources; maintain access and engage with threat actors to gather information.
• Collect and curate data using AI-assisted triage and other tools to analyze high volumes of material.
• Respond to research requests and collaborate on investigations and cross-team projects.
• Propose automation and AI-supported workflows to improve speed and consistency of analysis.

Skills

Russian language

Cyber intelligence

OSINT methods

Analytical writing

AI tools usage

Team collaboration

Education

Bachelor’s or Master’s degree

Tools

Blockchain research tools

Job description

Role overview

Research criminal activity across underground online communities to produce timely intelligence on threat actors, campaigns, tools, and cybercrime trends. The work combines proactive open-source research, careful source development, and requests from internal teams and customers. You’ll collaborate with specialists across a distributed intelligence organization and communicate findings to both technical and nontechnical audiences.

Responsibilities

• Investigate activity on underground forums, marketplaces, shops, and private communication channels; track actors, tactics, campaigns, and relevant trends.
• Write finished intelligence reports and shorter analyst notes for customer and public audiences.
• Identify and develop sources, maintain access over time, and engage with threat actors to gather information unavailable through public sources.
• Collect and curate relevant data, using AI-assisted triage and other tools to analyze high volumes of material.
• Respond to research requests and work with colleagues on investigations and cross-team projects.
• Propose automation and AI-supported workflows, and share practices that improve the speed and consistency of analysis.

Requirements

• Professional fluency in Russian and at least three years of experience in cyber intelligence, cybersecurity, investigations, or a related field.
• Strong intelligence tradecraft, OSINT methods, and clear analytical writing; able to explain findings and present them to customers or at conferences.
• Hands‑on experience with underground sources and communications, covert operations, sensitive information, and advanced operational security practices.
• Knowledge of cybercrime ecosystems, regional activity, current tactics, fraud, money laundering, and links among criminal, hacktivist, extremist, and state‑backed operations.
• Experience handling, tracing, and investigating cryptocurrency transactions, including blockchain research.
• Regular use of AI tools in research or writing, with the ability to create and refine prompts and independently check outputs for accuracy and objectivity.
• A relevant bachelor’s or master’s degree, or equivalent experience; practical experience applying large language models in analysis workflows is also requested.
• Able to work collaboratively with colleagues across locations.

Benefits and work setup

The role is remote within the United States, with Boston and Washington, DC listed as preferred locations. The source lists a base salary range of $129,000–$193,500, with location and job‑related factors affecting pay. The position may also include incentive compensation, equity, health and life insurance, and a retirement plan.