Head of Threat Research

Netcraft is the global leader in cybercrime detection and disruption. We’re a trusted partner for three of the four largest companies in the world and many large governments. We’ve blocked almost 200 million cyber-attacks to date, and we take down around 33% of the world’s phishing attacks.

Our purpose and passion are focused on just one thing: protecting the world from cybercrime.

That passion shapes how we work, too. We’re proud of our talented team and the value each person brings, and we’ve built a workplace where people feel supported and inspired. From strong benefits and wellness programs to meaningful collaboration and team connection.

As Head of Threat Research at Netcraft, you will lead the team responsible for publishing research grounded in Netcraft’s unique data sets, including global malicious URL and domain telemetry, and a takedown corpus spanning more than 20 years of phishing, malware, and brand impersonation attacks.

This is a newly created role within the expanding Product Strategy and Emerging Threats team. You will conduct hands‑on research, lead a small team of threat analysts, own the publication pipeline, and help represent Netcraft through conferences, webinars, media engagements, and written publications.

This is a remote position based in the United States, with occasional travel for conferences, team meetings, and customer engagements.

• Set editorial direction and quality standards across whitepapers, customer reports, blog posts, and briefing materials
• Speak at industry conferences and webinars, including keynotes, panels, and expert commentary
• Present complex findings to security analysts, senior executives, board members, and government officials
• Serve as a media spokesperson on Netcraft’s threat research, including interviews and commentary with media outlets

• Research phishing, malware, malicious JavaScript, and cybercrime campaigns using Netcraft’s threat intelligence platforms
• Produce threat assessments ranging from short reactive write‑ups on active campaigns to in‑depth briefings on threat actors and emerging trends using internal telemetry and open‑source intelligence
• Track how threat actors exploit current events, emerging technologies, and changes in the threat landscape
• Attribute infrastructure and campaigns to named threat actor groups and criminal ecosystems over time
• Review the team’s research output for quality, accuracy, and technical depth prior to publication

• Mentor and develop a team of threat analysts
• Partner with engineering and operations teams to turn research findings into detection rules, IOC feeds, takedown signals, and platform improvements
• Support complex customer engagements by mapping threats to frameworks such as MITRE ATT&CK, the Diamond Model, and the Cyber Kill Chain, while briefing customers directly
• Brief product, marketing, and sales teams on research findings to support roadmap planning, positioning, and customer conversations

• Published research in threat intelligence or cybersecurity (blog posts, whitepapers, conference talks, etc.)
• Experience presenting original research to audiences ranging from technical analysts to C‑suite executives
• Several years of threat intelligence experience, including experience leading or managing a team
• Strong editorial judgment with experience reviewing and improving research writing for clarity, quality, and accuracy
• Experience managing or contributing to a publication pipeline
• Deep understanding of phishing, malware, online fraud, social engineering, and threat actor TTPs
• Current working knowledge of web technologies, internet…