Deep Dark Web Researcher

<b>OPPORTUNITY OVERVIEW</b><a href="http://zerofox.com/">ZeroFox</a> <span>seeks </span>a Deep and Dark Web (DDW) Threat Researcher to perform detailed threat research in deep and dark web environments in response to standing customer requirements and ad hoc requests. Serving within the ZeroFox Public Sector Services (PSS) department, this senior role will support Deep Dark Web environments with operational security (OPSEC) best practices being deployed. <h3>Role and responsibilities</h3> <ul> <li>Access the DDW environment safely and with operational security (OPSEC) best practices to solve customers’ cybersecurity challenges</li><li>Attend cyber intelligence-related courses (military, college, or private)</li><li>Conduct research in DDW environments, including the identification and analysis of threat actors / threat actor groups that shift between multiple venues</li><li>Identify threat actor tactics, techniques, and procedures (TTP), goals, targets, and motives</li><li>Ascertain underground criminal language / terminology </li><li>Craft findings into finished intelligence on a spectrum of modes/formats</li><li>Learn how to leverage patented internal intelligence tools within ZeroFox to gather, assess, and present intelligence</li><li>Identify and track key aspects of threat actors/associated networks and groups</li><li>Perform detailed threat research in DDW environments in response to standing customer requirements and ad hoc requests</li></ul> <h3>Required qualifications and skills</h3> <ul> <li>Experience in conducting detailed investigative research, some of which included significant DDW research, typically obtained in 5+ years</li><li>Cyber intelligence-related courses (military, college, or private)</li><li>Ability to assess veracity of raw intelligence information from multiple, conflicting sources</li><li>Strong ability to coalesce and articulate findings in any number of finished intelligence formats to include but not limited to: written long-form finished intelligence reports, briefings (including verbal communication skills to present findings), short or informal reports, and other modes of presenting intelligence verbally</li><li>Knowledge of / experience with tools required to access the DDW, ie VPN, VM, etc.</li><li>Experience conducting open source investigations, including using novel search techniques</li><li>Proficiency using Google’s suite of office tools</li><li>Strong background in research, writing, and analytical tradecraft</li><li>Comfort working in a small team environment and with flexibility to engage in multiple processes</li></ul> <h3>Desired qualifications and skills</h3> <ul> <li>Language (Russian, Mandarin Chinese, Farsi) highly preferred</li><li>Experience working with US government organizations</li><li>Experience with blockchain technology and ability to research threat actors’ use of cryptocurrency</li><li>Experience with common cyber threat intelligence tools, such as VirusTotal, indicator of compromise (IOC) research, internet infrastructure analysis</li><li>Familiarity with common cyber crime techniques</li><li>High degree of comfort operating on a small team with diverse personalities</li><li>Leadership experience or consulting experience</li><li>Previous Intelligence experience highly preferred</li></ul> <h3>Benefits</h3> <ul> <li>Competitive compensation</li><li>Community-driven culture with employee events</li><li>Generous time off </li><li>Comprehensive health benefits &amp; 401(k) plan</li><li>Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture</li></ul> <h3>Interested?</h3> <ul> <li>Ready to apply? Visit us at <a href="https://www.zerofox.com/careers">https://www.zerofox.com/careers</a> to find out more and join the best team in the security industry.</li><li>Not ready to apply? Email careers_at_zerofox_dot_com to speak with a member of the team!</li></ul> <h3>Other Information</h3> <ul> <li>This position will report to the Lead, Principal Analyst</li><li>This position may entail up to 5-10 % travel </li><li>This role will be based out of our office in Savannah, GA (hybrid)</li><li>This role requires occasional work on nights and weekends as needed.</li></ul><b>ABOUT ZEROFOX</b><a href="http://zerofox.com/">ZeroFox</a><span> is on a mission to make the internet safer for all. Innovation is at our core – we are relentless in the pursuit of finding new ways to disrupt external cyber threats on the surface, deep, and dark web. ZeroFox offers the only unified cybersecurity platform combining advanced AI analytics, digital risk and privacy protection, full-spectrum threat intelligence, and a robust portfolio of breach, incident and takedown response capabilities to protect customers from growing threats across the external attack surface. It’s a great time to join us in the Fox Den – with fresh private equity funding, expanding investments in AI, a people-first cu