Intelligence Research Lead

Job Purpose

A highly skilled and experienced Senior Cyber Threat Research Analyst to play a technical leading role within the advanced intelligence research team part of the Intelligence Fusion Center in our Managed Security Services MSS. Reporting to the Cyber Threat Research Sr Manager the Intelligence Research Lead will focus on conducting in-depth analysis advanced artifact research and producing high-quality intelligence outputs that directly support MSSP operations and enhance client security postures.

This senior role requires expertise in advanced threat research artifact analysis and intelligence generation with a strong emphasis on delivering actionable insights to internal teams and external clients.

• Lead and conduct advanced threat research and in-depth analysis on cyber threats including APT campaigns malware zero-day vulnerabilities and adversary TTPs.
• Perform detailed artifact analysis such as malware reverse engineering forensic investigations and network traffic analysis to uncover IOCs and threat actor fingerprints.
• Produce high-quality actionable intelligence reports threat assessments and briefings tailored to MSS clients and internal teams.
• Collaborate with internal teams to provide intelligence that enhances detection response and mitigation efforts.
• Mentor junior analysts sharing expertise in advanced analysis techniques tools and intelligence production best practices.
• Act as a company subject matter expert SME for cyber threat intelligence related topics and engagements.
• Support MSS clients by delivering tailored intelligence outputs participating in briefings and addressing industry-specific risks.

• Bachelor’s degree in Cybersecurity Computer Science Information Security or related field.
• Related cybersecurity professional certificates licenses like GCTI or GREM are a plus.
• 5 years of experience in cyber threat intelligence and advanced analysis roles CTI or DFIR with at least 2 years in a client service delivery or large enterprise capacity.
• Advanced expertise in artifact analysis including malware reverse engineering memory forensics and advanced exploitation techniques.
• Proficiency in tools such as IDA Pro Ghidra Volatility Wireshark and YARA as well as other advanced analysis platforms.
• Strong understanding of cyber threat intelligence frameworks such as MITRE ATT&CK Diamond Model and Cyber Kill Chain.
• Familiarity with SIEMs Threat Intelligence Platforms TIPs XDR Sandbox and other MSSP tools and technologies.
• Proficiency in scripting or programming languages e.g. Python Power Shell for automation and analysis tasks.
• Deep knowledge of adversary TTPs campaign lifecycle analysis and threat actor profiling.
• Excellent written and verbal communication skills with the ability to convey complex concepts to both technical and non-technical audiences.
• Strong analytical and critical thinking skills with a focus on delivering precise actionable intelligence for internal and external stakeholders.
• Strong collaborative aptitude fostering effective relationships across multiple teams.
• Ability to manage multiple priorities and deliver high-quality outputs under tight deadlines.