Threat Researcher - Remote US Threat Intelligence

GreyNoise, Inc.; Northern (KY); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Health insurance

Dental plan

Vision plan

Life insurance

Remote-first culture

Equipment budget

Paid family leave

Professional development

Team offsites

Job summary

GreyNoise Intelligence is a mission-driven security startup delivering real-time threat intelligence from a global sensor network. We are hiring a Threat Researcher to develop and exploit data sources to produce actionable intelligence for customers and partners.

You will hunt, track, attribute, and disrupt malicious activity, build new data sources and tools, and present findings to stakeholders. This role is remote within the US with optional DC-area office access.

Qualifications

• Deep understanding of networking protocols.
• Ability to hunt through network traffic (full PCAP).
• Experience with offensive tooling and exploitation methodologies.
• Open-source and commercial intelligence research experience.
• Experience with hardware and embedded systems.
• Experience with SQL.
• Experience tuning detection rules (Suricata, YARA).
• Binary analysis and reverse engineering experience.
• Cyber threat intelligence frameworks and analytical tradecraft.
• Graph-based threat analysis tools (e.g., Synapse).
• Public speaking at security conferences.

Responsibilities

• Hypothesis-driven hunting using first-party data to identify malicious activity.
• Cluster, track, attribute, research and disrupt threats.
• Develop new intelligence sources and tools for a comprehensive threat picture.
• Produce and disseminate actionable intelligence to customers and the public.

Skills

Networking fundamentals

PCAP analysis

Offensive tooling

OSINT research

Hardware/embedded

SQL

Detection rules

Binary analysis

Threat frameworks

Graph analytics

Conference presenting

Tools

Suricata

YARA

Synapse

PCAP tools

Job description

GreyNoise Intelligence is a mission-driven security startup delivering real-time threat intelligence from a global sensor network. We are hiring a Threat Researcher to develop and exploit data sources to produce actionable intelligence for customers and partners.

You will hunt, track, attribute, and disrupt malicious activity, build new data sources and tools, and present findings to stakeholders. This role is remote within the US with optional DC-area office access.