Source Job

$86,000–$240,000/yr
Global Unlimited PTO

  • Lead rapid-response research into emerging threats, actively hunt across telemetry, and produce time-sensitive intelligence assessments.
  • Correlate endpoint, network, cloud, and identity data to develop campaign hypotheses and scope widespread adversary activity.
  • Develop operational detections using YARA, Sigma, and analytics, and publish high-quality research for internal and external audiences.

SQL Python Threat Intelligence

20 jobs similar to Staff Threat Intelligence Researcher

Jobs ranked by similarity.

$122,400–$176,000/yr
US

  • Conduct original threat intelligence research into active email and identity attack campaigns.
  • Synthesize complex and conflicting data into clear assessments, reports, briefings, and webinars for varied audiences.
  • Partner with Sales, Customer Success, and Marketing to deliver intelligence that supports customer and prospect decisions.

Abnormal protects the humans behind the world's most critical organizations from AI-powered cybercrime. 5,000 enterprises trust our behavioral AI platform.

France

  • Provide tier 2 and 3 support to customers and collaborate with threat researchers to challenge detection engines.
  • Analyze huge web traffic data sets to identify and block malicious traffic, and create scripts to detect outliers.
  • Identify potential attacks and add new alerts to strengthen DataDome's real-time detection platform.

DataDome stops cyberfraud and bots in real time using a multi-layered AI engine built on intent analysis. The company is backed by a 24/7 SOC team and a multicultural R&D team, with a joyful workplace and many social events.

$180,000–$225,000/yr
US

  • Monitor and evaluate agentic incidents, performing root-cause analysis across source alerts and pipelines to provide feedback to the AI team.
  • Define telemetry fields and contextual requirements for analyst-grade investigations, ensuring reliable data across detection surfaces.
  • Research and onboard telemetry from emerging security vendor APIs, mapping them into a unified security data model.

Zscaler accelerates digital transformation with its Zero Trust Exchange platform, protecting customers from cyberattacks and data loss. With thousands of customers and over 200 data centers globally, it fosters a culture of ownership, collaboration, and ongoing feedback.

$70,000–$75,000/yr
US

  • Perform triage and advanced analysis across endpoint, server, and network infrastructure.
  • Conduct threat hunting and proactive investigations to detect malicious activities.
  • Document recommendations and maintain knowledge of the threat landscape.

Cyderes builds identity and access management, exposure management, and managed detection and response programs to stop active threats. The company is Great Place to Work certified and supported by a tireless global team.

US

  • Provide strategic threat hunting oversight and technical leadership across complex federal cybersecurity environments.
  • Analyze adversary TTPs and develop actionable intelligence to strengthen enterprise detection and defenses.
  • Lead threat modeling, adversary emulation, and Purple Team exercises to identify detection gaps and improve security controls.

True Zero Technologies is a veteran-owned small business dedicated to purposeful enablement of people and technology. Recognized as a Best Places to Work honoree and Inc. 5000 fastest-growing company, it fosters a community of driven individuals delivering top-tier cybersecurity services.

$120,000–$160,000/yr
US

  • Investigate complex cyber abuse escalations across ransomware, malware, exploits, and data exfiltration threats.
  • Profile threat actors and campaigns using telemetry, external intel, and MITRE ATT&CK tradecraft.
  • Mentor junior investigators, review casework, and deliver high-fidelity labels for AI safety classifiers.

TaskUs is a provider of outsourced digital services and next-generation customer experience for fast-growing technology companies. With approximately 60,000 employees across 23 locations worldwide, the company maintains a People First culture focused on employee well-being and internal mobility.

Ireland UK

  • Lead comprehensive threat prevention for global offices, executives, and employees across 26 offices and over 10,000 employees.
  • Conduct investigations using open-source intelligence, law enforcement databases, and social media to identify and manage threats.
  • Build relationships with law enforcement and collaborate with internal teams to manage the lifecycle of cases and provide actionable assessments.

Concentric is a risk consultancy specializing in delivering strategic security and intelligence services for private clients and corporations globally. The company is staffed by elite professionals from military, government, and intelligence backgrounds, and aims to be the most innovative, capable, and trusted Risk Management partner in the world.

US

  • Own customer RFIs from intake through delivery, conducting rapid-turnaround investigations and long-term research into fraud schemes, threat actors, and criminal ecosystems.
  • Analyze fraud TTPs across account takeover, payment fraud, phishing, and other schemes, and produce concise, client-ready intelligence reports.
  • Help identify and evaluate new open, deep, and dark-web sources and work with collections, engineering, and product teams to improve intelligence at scale.

Overwatch Data is building the intel and risk teams of the future, combining reliable automation, AI agents, and creative technical experts to help financial institutions and digital-facing companies identify cyber-enabled fraud across the open, deep, and dark web. The company emphasizes collaboration across engineering, data science, product, and customer teams to turn fragmented data into timely, evidence-backed intelligence.

$115,000–$128,000/yr
US Unlimited PTO

  • Lead advanced threat investigations and independent threat hunting across diverse customer environments.
  • Act as an escalation point for complex incident analysis and collaborate with SOC analysts on emerging threats.
  • Develop detection capabilities, refine hunting methods, and deliver clear incident reports to strengthen defenses.

They are a cybersecurity partner specializing in managed detection and response services. The organization fosters a high-performance, collaborative culture grounded in integrity, ownership, and customer focus.

$110,000–$125,000/yr
US

  • Monitor and analyze security events to identify potential threats and vulnerabilities within the organization's infrastructure.
  • Utilize advanced threat intelligence sources, security tools, and techniques to detect and investigate security incidents.
  • Collaborate with cross-functional teams to develop and implement proactive measures that strengthen the organization's security posture.

Valiant Solutions delivers cybersecurity and IT services to federal civilian, defense, and national security customers nationwide. The company is a multi-year Washington Business Journal Best Places to Place winner, with a distributed workforce supporting customers from coast to coast.

$63,500–$76,200/yr
UK

  • Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, and data-protection technologies.
  • Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider threat, and third-party events.
  • Conduct threat intelligence, threat hunting, and vulnerability management to prioritize and remediate risks.

Trupanion is a leading provider of medical insurance for cats and dogs in North America. We offer a collaborative, casual, and pet-friendly environment where everyone is encouraged to be themselves.

$83,700–$94,500/yr
Ireland

  • Lead Europe-focused market and competitive research while contributing to global CMI priorities.
  • Analyze buyer priorities, competitor positioning, pricing, and regional differences.
  • Design and conduct primary and secondary research, including buyer conversations and win/loss analysis.

Huntress provides enterprise-grade cybersecurity accessible to businesses of all sizes. Founded in 2015, it is a remote-first team now securing over 6M endpoints and 17M identities worldwide, with a culture of inclusivity.

$71,500–$91,000/yr
Australia 12w maternity 12w paternity

  • Triage, investigate, and remediate Active Hands-On Keyboard intrusions using endpoint telemetry, logs, and forensic artifacts.
  • Support sales, collaborate with Product to shape the MDR service, and contribute to Incident Response, Threat Hunting, and Detection Engineering.
  • Share findings through blogs, conference talks, and research publications to build your personal brand and the security community.

Huntress provides enterprise-grade cybersecurity to businesses of all sizes through a human-led Security Operations Center. Founded in 2015 by former NSA operators, the remote-first team secures over 6 million endpoints and 16 million identities worldwide, fostering a collaborative and inclusive culture.

$10,000–$13,000/yr
India

  • Investigate, contain, and remediate cybersecurity incidents across customer environments.
  • Conduct digital forensics, malware analysis, and threat intelligence to identify attacker techniques.
  • Collaborate with security operations and threat hunting teams to improve detection and response.

A cybersecurity company that provides incident response and digital forensics services to customers facing security threats. The team works remotely in a 24/7 security operations environment with a focus on collaboration and continuous improvement.

  • Investigate and analyze logs and security-related events via Sophos tooling
  • Identify and respond to cyber threats occurring within customer environments
  • Communicate and document findings to various customer audiences including technical and executive teams

Sophos is a cybersecurity company that delivers best-in-class monitoring, detection, and response services. It is a remote-first company with a focus on teamwork and continuous improvement.

Slovakia

  • Develop use cases and detection rules while assisting in the conception and design of detection strategies.
  • Collaborate with the SOC for use case validation and acceptance, and refine existing detection rules.
  • Create dashboards and reports for customers or the internal SOC, and contribute to internal knowledge sharing.

Deutsche Telekom IT Solutions Slovakia provides innovative information and communication technology services and is a key driver of digitalization for medium-sized companies. With over 3,900 employees, we foster a culture of work-life balance and continuous transformation.

North America 2w PTO

  • Analyze incoming threat intelligence, assess its credibility and relevance, and run IOC sweeps across our environment.
  • Own pieces of work across the threat management lifecycle, turning intel into recommendations for detection, incident response, and vulnerability management.
  • Develop and test detection rules, build orchestration workflows, and automate triage, enrichment, and response using AI tools.

We build the market-leading enterprise password manager and pioneered Unified Access Management, trusted by over 180,000 businesses. We've surpassed $500M in ARR, made the Forbes Cloud 100, and nurture a remote-first, collaborative culture.

  • Handle escalations from Level I analysts and guide on investigation handling.
  • On-board new threat analysts and participate in process improvement.
  • Conduct detection and response to security events and maintain security metrics.

Sophos is a global cybersecurity company specializing in managed detection and response services. With a remote-first culture and a global team, the company values diversity and collaboration.

US Unlimited PTO

  • Lead and conduct threat actor communications engagements for clients in ransomware and data extortion cases, advising on risks and strategies.
  • Support digital forensics and incident response investigations by identifying and sharing actionable intelligence.
  • Contribute to intelligence research and operationalize data obtained through threat actor engagement and DFIR efforts.

GuidePoint Security provides trusted cybersecurity expertise, solutions, and services to help organizations make better decisions and minimize risk. With over 1,300 employees, the company is a rapidly growing, profitable, privately-held value added reseller that serves over 6,200 customers and fosters a collaborative, knowledge-driven culture.

US

  • Handle escalations from level I Threat Analysts and train new team members in a 24/7 SOC environment.
  • Conduct security log monitoring, event detection, and response using endpoint and network security tools.
  • Research threat intelligence, create MDR reports, and interact with clients to neutralize cyber threats.

Sophos is a global leader in cybersecurity, providing advanced threat detection and response solutions. The company is a remote-first organization with a diverse and collaborative culture, committed to innovation and employee growth.