{"id":3591769,"url":"https://alion.io/job/blockaid-threat-intelligence-analyst","title":"Threat Intelligence Analyst","company":{"id":175514,"name":"Blockaid","domain":"blockaid.io","url":"https://alion.io/company/blockaid","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":68000,"max_usd":166000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"MetaMask","optional":false},{"name":"Uniswap","optional":false}],"status":"live","first_seen_at":"2026-11-01T19:03:51Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-07T10:47:35Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Description\nMoney is becoming software. That changes everything about how it has to be protected. Stablecoins, tokenized assets, and payments made by AI agents are moving real value at machine speed. That’s where Blockaid comes in. We build the security technology behind how money moves. Coinbase, MetaMask, Uniswap, and many of the largest platforms moving money today rely on us to screen billions of transactions and stop fraud, scams, and hacks before they reach a single user.\nWe’re backed by investors including Sequoia Capital, Ribbit Capital, and Cyberstarts, firms behind some of the biggest names in cybersecurity.\nWe’re looking for a Threat Intelligence Analyst to join our threat intelligence team and track the cybercriminals targeting crypto. You’ll dig into attackers’ TTPs across on-chain and off-chain sources, from the dark web to messaging apps, turning OSINT and HUMINT into intelligence reports and prevention strategies that protect millions of users.\nWhat You'll Do:\nTrack and evaluate crypto-focused cybercriminals, including the tools, techniques, and procedures used by attackers, their motivations, and industry-wide trends.\nProduce and present intelligence reports on relevant threat groups and campaigns, detailing methodologies and the motivations driving the activities.\nResearch both on-chain and off-chain crypto attack vectors, identifying attacker interests and uncovering root causes behind incidents.\nHelp develop prevention strategies and detection mechanisms to mitigate future attacks.\nCollect and manage information from diverse sources such as social media platforms, messaging apps, forums, the dark web, news feeds, and other open and covert channels.\nUse advanced tools and investigative techniques, including OSINT and HUMINT methodologies, to generate accurate and relevant intelligence.\nCommunicate with customers about potential risks and threats, and work closely with Customer Success, Marketing, and Sales.\nRequirements\n3+ years of experience in intelligence analysis, with a focus on WEBINT / OSINT.\nStrong understanding of Cyber Threat Intelligence (CTI), the cybercrime ecosystem, and underground information sources.\nExcellent analytical thinking and report-writing skills\nFluent English, written and spoken.\nFamiliarity with AI coding and automation tools and ability to build automated processes, analyze data and build visualizations for threat reporting\nNice to have:\nExperience with blockchain technologies and a solid grasp of the Web3 ecosystem and its threats.","description_format":"text","description_chars":2525,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Cybersecurity","Cryptocurrencies"],"lifecycle":[{"event":"open","at":"2026-11-01T19:41:13Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":41,"reasons":["conf:3","velocity","win:early","comp:attention"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/blockaid-threat-intelligence-analyst","json_url":"https://alion.io/job/blockaid-threat-intelligence-analyst.json","meta":{"generated_at":"2026-11-07T12:23:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13790,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":175514},"rest":"https://alion.io/mcp/rest/get_company?id=175514"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblockaid-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblockaid-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblockaid-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blockaid-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblockaid-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3591769}},{"tool":"search_jobs","arguments":{"company":"blockaid.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3591769},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}