{"id":3149476,"url":"https://alion.io/job/control-risks-investigative-researcher-cyber-threat-intelligence","title":"Investigative Researcher, Cyber Threat Intelligence","company":{"id":6732,"name":"Control Risks","domain":"controlrisks.com","url":"https://alion.io/company/control-risks","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":79,"open_postings":17,"ghost_share":0,"stale_share":0.824,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":52000,"max_usd":119000,"period":"year","method":"role_country_seniority_unknown","sample_n":159},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Excel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Power Automate","optional":false},{"name":"Power BI","optional":false}],"status":"live","first_seen_at":"2026-10-23T11:40:58Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-26T23:32:19Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"As the Investigative Researcher you will conduct desktop and online investigative research into cyber and online threats, to enrich our Cyber Threat Intelligence (CTI) reporting and support bespoke investigations. This role will primarily involve conducting threat actor and incident-focused research, contributing regular reporting for Control Risks’ Cyber Incident Response team, producing context for the Seerist platform and supporting ad-hoc investigative projects. Please note that this role requires you to work from our London (Bank/Monument) office at least three days per week on a hybrid basis.\nKey Responsibilities\nResearch and information gathering\nConduct regular profiling of cyber threat actors to support on-going incidents and investigations.\nDemonstrate strong investigation skills relating to specific cyber threat incidents, data breaches and other cyber security incidents.\nResearch new sources of information and develop capabilities to collect and analyse information in support of the team.\nBuild knowledge of collection tools to support bespoke investigative projects and Cyber Incident Response engagements.\nContribute continuous research for inclusion in routine CTI reporting and bespoke threat assessments.Develop knowledge of principal cyber and online threat actors through research on open source, social media, deep and dark web sites and Control Risks internal intelligence systems.\n\nSupport our clients with regular monitoring of our deep and dark web sources. Please note that this role includes some flexible weekend monitoring.\nGeneral analytical responsibilities\nSupport analysis on bespoke projects through data collection across all CTI products, demonstrating an ability to make judgments on the value of research collected.\nBe technically aware and understand basic cyber security principles e.g. MITRE ATT&CK, the unified kill chain, the intelligence life cycle.\nBe alert to the political implications of developments among cyber threat groups and bring these to the attention of other service lines.\nContribute analysis for subscription updates.\nMarketing and business development\nSupport business development through initial research scoping for proposals and other business development and marketing exercises.\nRequirements\nKnowledge and Experience\nEssential\nInterest in and knowledge of cyber threat and risk issues and the interaction between political developments and the evolving threat landscape.\nInterest in and knowledge of intelligence and threat assessment principles, understanding of methods used to identify, understand and compare threat actors.\nExperience in undertaking operational and tactical level research and investigations relating to cyber threat incidents or using cyber as a means of collecting information.\nAcademic or professional training in cyber investigations or open-source intelligence.\nAbility to prepare sizable written reports for a senior business audience.\nPreferred\nAdditional languages to English. Russian, Chinese, Farsi preferred.\nQualifications and specialist skills\nEssential\nDegree level qualification or equivalent.\nDemonstrable experience in collecting information from multiple sources in support of complex research projects in the online intelligence or cyber threat and security domains.\nPreferred\nIntelligence analysis training or qualifications (e.g. City and Guilds, SANS GIAC, CREST threat intelligence practitioner or researcher, GIAT or DIAM UK government modules).\nOpen-source intelligence collection and investigation qualifications.\nInterest and experience in the cryptocurrency landscape with the ability to analyse threats and investigate using blockchain technology.\nFamiliarity with software packages including i2 Analyst Notebook, high level of Microsoft Excel proficiency (knowledge of pivot tables and macros), Power BI or Power Automate.\nBenefits\n Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarised in the full job offer.\n We operate a discretionary global bonus scheme that incentivises, and rewards individuals based on company and individual performance.\n Control Risks supports hybrid working arrangements, wherever possible, that emphasise the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.\n As an equal opportunities employer, we encourage suitably qualified applicants from a wide range of backgrounds to apply and join us and are fully committed to equal treatment, free from discrimination, of all candidates throughout our recruitment process. \n If you require any reasonable adjustments to be made in order to participate fully in the interview process, please let us know and we will be happy to accommodate your needs.","description_format":"text","description_chars":4795,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":true}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Security Services","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-23T11:40:58Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-24T06:24:00+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":35,"reasons":["conf:1","stale_co","velocity","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/control-risks-investigative-researcher-cyber-threat-intelligence","json_url":"https://alion.io/job/control-risks-investigative-researcher-cyber-threat-intelligence.json","meta":{"generated_at":"2026-10-27T00:51:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1122,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6732},"rest":"https://alion.io/mcp/rest/get_company?id=6732"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcontrol-risks-investigative-researcher-cyber-threat-intelligence"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcontrol-risks-investigative-researcher-cyber-threat-intelligence"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcontrol-risks-investigative-researcher-cyber-threat-intelligence"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/control-risks-investigative-researcher-cyber-threat-intelligence\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcontrol-risks-investigative-researcher-cyber-threat-intelligence"}]}