Threat Intelligence Researcher Full Time

Summary:

• SecurityScorecard is the global leader in cybersecurity ratings, continuously rating over 12 million companies across 64 countries.
• Founded in 2013 by Dr. Alex Yampolskiy and Sam Kassoumeh, the company is funded by top investors including Silver Lake Waterman, Moody’s, and Sequoia Capital.
• SecurityScorecard’s technology supports 25,000+ organizations in managing risk and improving security posture through monitoring, reporting, and underwriting tools.
• Recognized by multiple awards, such as Fast Company’s “World’s Most Innovative Companies” for 2023 and the “Achievers 50 Most Engaged Workplaces” in 2023.
• The company operates with a remote culture and is headquartered in New York City.

Responsibilities:

• Tracking campaigns from known and unknown major threat actors targeting public, private, and government entities.
• Writing Python automation scripts to collect proprietary threat intelligence data.
• Monitoring Advanced Persistent Threats (APT), ransomware, and major cybercrime TTPs.
• Authoring and publishing security reports and sharing findings with the research community.
• Training internal teams on advanced threat tracking methodologies.
• Supporting products and customers with context on threats and risk integration.
• Analyzing technical data to extract attacker TTPs, malware attributes, and related threat data.
• Hunting for emerging threats using internal and external data sources.
• Establishing standards and processes for threat modeling and integration.
• Performing research and analysis during critical cyber-attacks affecting global customers.

Requirements:

• 2–5 years of experience in cybersecurity research, including tracking nation-state or cybercrime-driven campaigns.
• Expertise in analyzing campaigns, malware, C2 servers, and CVEs.
• Proficiency in a high-level programming language (e.g., Python, Go, Ruby).
• Familiarity with threat intelligence platforms like MISP, Splunk, VirusTotal, and Silobreaker.
• Strong written and verbal communication skills for technical and non-technical audiences.
• Decision-making, prioritization, troubleshooting, and teamwork skills in fast-paced environments.

Preferred Qualifications:

• Experience in low-level programming languages (C, Assembly) for exploit development.
• Knowledge of streaming platforms like Kafka for centralizing threat intelligence data.
• Skills in static/dynamic malware analysis and reverse engineering tools (IDA, Ghidra, Radare).
• Expertise in automation for analyzing malware campaigns and CVE detection.

Benefits:

• Competitive salary and stock options.
• Health benefits tailored to each country.
• Unlimited PTO, parental leave, tuition reimbursement, and more.
• Commitment to diversity and equal employment opportunities.
• Reasonable accommodations for individuals with disabilities.