Head of Threat Research

Bitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. Built on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis.

We invented the cyber ratings industry in 2011

Over 3500 customers trust Bitsight. Over 600 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote.

The Head of Threat Research will lead a high-impact team dedicated to expanding Bitsight's ability to detect compromised systems worldwide. This role involves driving innovation in our data collection strategies, specifically focusing on broad-scale opportunistic domain sink holing, bot emulation, and other malware tracking techniques to develop one of the world’s largest victim intelligence capabilities. This role will own the domain and malware triage workflows in addition to setting priorities for targeted malware investigations.

They additionally will serve as the primary champion and advocate for enhancing Bitsight’s suite of product features with an evolving set of victim intelligence capabilities and data.

• Establish team priorities for research and development of new victim intelligence collection and analysis capabilities to maximize coverage of impactful victim intelligence
• Lead, mentor, and grow the team of malware researchers and analysts
• Spearhead the development and deployment of next-generation malware emulators, trackers, and crawlers to collect infections telemetry
• Drive research initiatives into complex C2 communication channels (e.g., P2P, direct IP, hybrid models) to maintain visibility over botnets
• Own victim intelligence data quality and drive continuous improvement
• Partner with product, engineering, and data science teams to translate threat telemetry into scalable product capabilities

• Broad subject matter expertise across malware infrastructure and C2 methodologies
• Experience developing detection rules and extracting IOCs from malware analysis
• Demonstrated experience in managing and leading high-performing technical teams in a research or security-focused environment
• Demonstrated success in architecting complex technical workflows, such as malware analysis, telemetry collection, or large-scale data processing
• Strong communication and analytical skills, including the ability to identify and solve ambiguous problems
• Proficient in standard scripting languages (e.g., Python, Go)

• B.S. in Computer Science or similar field, or commensurate experience.

The anticipated hiring base salary range for this position is  -  USD Annual for US-based employees. This range reflects the minimum and maximum target for new hire salaries for the position across all US locations, is based on a full-time work schedule, and is Bitsight’s good faith estimate as of the date of this posting. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

In addition to base salary, this role is eligible for participation in a bonus or commission plan and an equity grant.

• medical
• dental
• vision insurance
• paid parental leave
• flexible time off
• a 401(k) plan with employee and company contribution opportunities
• life and disability insurance
• tuition reimbursement

Bitsight is proud to be an equal opportunity employer.

This means we do not tolerate discrimination of any…