Emerging Threat Intelligence Analyst

With 1,000 employees, over $250M in sales, 1,500+ clients, and rapid year-over-year growth, Recorded Future is the world’s most advanced, and largest, intelligence company!

We are seeking a uniquely talented individual who combines the technical acumen of a Cyber Threat Hunter with the expressive skills of a Technical Writer to work as an Emerging Threat Intelligence Analyst. This individual will be a critical component of our Attack Surface Intelligence Quick Reaction Team (QRT) and Recorded Future’s Insikt Group, and will be a point person for cross team collaboration. This individual will aid in the identification, assessment, and communication of new and emergent threats in the cybersecurity landscape.

What you'll do as Emerging Threat Intelligence Analyst

• Vulnerability Analysis: Working in concert with the QRT, you are tasked with the prompt identification, thorough analysis, and comprehensive assessment of emerging cybersecurity threats, specifically recently disclosed or exploited vulnerabilities. Your technical prowess will be crucial in ensuring our preparedness for potential risks and understanding the implications of prompt and thorough analysis of high impact vulnerabilities. 
• Threat Analysis: Working with Insikt Group, you are tasked with the production and review of intelligence summaries accessible to all Recorded Future clients. These summaries will detail a variety of cyber threat events, including recent cyber attacks and adjustments in known threat groups’ tactics, techniques, and procedures (TTPs).
• Technical Authorship: Utilizing your skill in making complex concepts accessible, you will convert intricate technical insights into engaging and easily understandable blog posts, client disclosures, and Insikt notes. Each publication should comprehensively address the nature of the threat, its potential impact, suggested mitigation strategies, and a succinct summary for quick referencing.
• Research Collaboration: You will partner with our Vulnerability Research team to augment our collective understanding of emergent threats and vulnerabilities. This collaborative exploration will subsequently inform and enhance our proactive protective measures.
• Cross-team Collaboration: As a member of the QRT and Insikt Group, you will be responsible for working on projects across multiple research teams with tight deadlines. 
• Detailed Documentation: Your role involves meticulous record-keeping, noting down intricate details of identified vulnerabilities, methodologies of discovery, and potential implications. This comprehensive record aids in understanding the nature of threats and planning appropriate responses.
• Continual Professional Development: Stay abreast of the latest advancements in cybersecurity trends, threat tactics, and research methodologies, ensuring our collective knowledge remains current and comprehensive.

What you'll bring to the Emerging Threat Intelligence Analyst Role:

• A degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• A minimum of 5 years of substantial experience in cybersecurity, with a focus on threat detection and vulnerability assessment.
• A solid grasp of fundamental cybersecurity principles, attack trajectories, and techniques for vulnerability analysis.
• Demonstrable experience researching and analyzing cyber threats across either a) multiple industries or b) multiple timeframes (e.g., both weekly and quarterly)
• Practical experience using common threat intelligence analysis models such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain
• Familiarity with and use of common cyber threat intelligence tools such as DomainTools, VirusTotal, SHODAN, etc.
• Demonstrable experience in technical writing, showcasing an ability to translate complex technical concepts into engaging, reader-friendly content.
• Demonstrably strong writing ability, to be assessed via a writing sample
• A meticulous attention to detail, underscoring a commitment to accuracy and thoroughness in all aspects of work.
• Capable of functioning effectively within a team as well as independently.

Preferred but not required:

• Relevant industry certifications such as CISSP, CEH, or equivalent.
• Familiarity with scripting languages such as Python, Ruby, Javascript, C, etc. 
• Prior experience within a quick reaction or incident response team environment.

Why should you join Recorded Future?
Recorded Future employees (or “Futurists”), represent over 40 nationalities and embody our core values of having high standards, practicing inclusion, and acting ethically. Our dedication