{"id":3032631,"url":"https://alion.io/job/infoblox-threat-researcher","title":"Threat Researcher","company":{"id":1761762,"name":"Infoblox","domain":"infoblox.com","url":"https://alion.io/company/infoblox-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":84,"open_postings":11,"ghost_share":0,"stale_share":0.636,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Porto Alegre, Brazil"],"countries":["BR"],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":27000,"max_usd":75000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":575},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false},{"name":"Telegram","optional":false},{"name":"VirusTotal","optional":false}],"status":"live","first_seen_at":"2026-10-21T20:41:03Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T00:17:58Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Please review ourCareer Ladderson the Career Hub to view roles side-by-side.\nAt Infoblox, every breakthrough begins with a bold “what if.”\nWhat if your ideas could ignite global innovation?\nWhat if your curiosity could redefine the future?\nWe invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career.\nHow we empower our people is extraordinary: we’re recognized as a Glassdoor Best Place to Work 2025, Great Place to Work-Certified in five countries, and honored by Cigna as a Healthy Workforce honors for three consecutive years; and what we build is world class: named CybersecAsia’s Best in Critical Infrastructure 2024 - clear evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next.”\nIn a world where you can be anything, Be Infoblox.\nThreat Researcher\nWe have an opportunity for a Threat Researcher to join our ART (Axur Research Team) in Home office - Brazil, reporting to the Supervisor, Threat Intelligence. In this role, you will conduct investigations and research into external cyber threats, including phishing, fraud, leaked credentials, malicious infrastructure, and threat-actor activity. You will transform evidence from OSINT, underground sources, internal datasets, and customer-provided information into clear, actionable intelligence.\nCollaborating closely with Threat Intelligence, Engineering, Automation, Product, and customer-facing teams, you will help expand investigative coverage, improve repeatable workflows, and support AI-assisted research and reporting capabilities. This role is designed for a developing threat researcher who can execute well-defined investigations, strengthen analytical judgment, and contribute to the team’s mission of turning external threat visibility into meaningful protection.\nBe a Contributor - What You’ll Do\nConduct end-to-end cyber threat investigations across phishing, brand abuse, fraud, leaked credentials, malware, and threat-actor activity\nHunt for relevant artifacts across the deep web, dark web, Telegram channels, underground forums, social platforms, and other authorized sources\nAnalyze URLs, domains, IP addresses, hashes, credentials, files, advertisements, and related evidence to identify malicious activity and exposure\nEnrich indicators with OSINT and threat intelligence sources such as VirusTotal, URLScan, WHOIS, passive DNS, Certificate Transparency logs, sandboxes, and community feeds\nMap phishing, fraud, and malware infrastructure by correlating related domains, hosting, certificates, campaigns, accounts, and actor behaviors\nQuery internal datasets and approved intelligence platforms to identify patterns, quantify exposure, and connect findings across clients, brands, and campaigns\nSupport investigations requiring careful communication, evidence collection, and interaction with threat actors under approved operational-security procedures\nDocument investigative methods, evidence, confidence levels, limitations, and conclusions according to team standards\nProduce concise, evidence-based intelligence reports, investigation updates, campaign briefs, and executive summaries in English; Portuguese or Spanish proficiency is an advantage\nContribute validated indicators, findings, and investigative context to internal intelligence platforms, monitoring workflows, and takedown or remediation processes\nBe Prepared - What You Bring\nTwo or more years of experience in cyber threat intelligence, threat hunting, fraud analysis, digital risk protection, SOC operations, incident response, OSINT investigations, or a related cybersecurity field\nPractical experience investigating phishing, fraud, brand abuse, leaked data, malicious domains, credentials, malware, or threat actors\nWorking knowledge of indicators of compromise, attack infrastructure, tactics, techniques, procedures, and confidence-based analysis\nExperience using OSINT and threat intelligence tools to research domains, IP addresses, URLs, files, identities, infrastructure, or underground activity\nAbility to correlate evidence from multiple sources, distinguish facts from assumptions, and maintain clear source traceability\nStrong written communication skills, with the ability to produce structured, accurate, and actionable intelligence reports\nFamiliarity with spreadsheets, structured data, search operators, basic scripting, or query languages such as SQL; Python is an advantage\nAbility to use AI-assisted research and productivity tools thoughtfully, validate generated content, and follow data-protection guidelines\nAbility to collaborate effectively, manage priorities across multiple investigations, ask for guidance, and incorporate feedback\nBachelor’s degree or equivalent practical experience in Cybersecurity, Computer Science, Information Technology, Intelligence, Journalism, Languages, or a related field; relevant certifications or training are beneficial\nBe Successful - Your Path\nFirst 90 Days: Immerse in our culture, connect with mentors (Blox Buddies), and map the systems and meet with key stakeholders that rely on your work. Discuss and create short/long term goals.\nSix Months:\nIndependently complete standard investigations from intake through reporting, with consistent evidence quality and appropriate escalation\nDemonstrate reliable use of internal platforms, OSINT sources, and approved AI-assisted tools while maintaining source traceability and confidentiality\nDeliver clear reports and investigation updates that meet ART quality, documentation, and turnaround expectations\nContribute validated indicators, campaign relationships, and workflow feedback that improve monitoring, enrichment, or remediation activities\nOne Year:\nOwn investigations of moderate complexity with limited supervision and explain findings, confidence, and limitations to relevant stakeholders\nIdentify recurring patterns across campaigns, brands, actors, or infrastructure and convert them into reusable hunting, monitoring, or reporting improvements\nDeliver at least one meaningful workflow, automation, or AI-assisted improvement that increases research quality, efficiency, consistency, or analyst capacity\nServe as a dependable contributor to team knowledge sharing, peer review, onboarding, and cross-functional collaboration\nBelong -Your Community\nOur culture thrives on inclusion, rewarding the bold ideas, curiosity, and creativity that move us forward. In a community where every voice counts, continuous learning is the norm. So, whether you code, create, sell, or care for customers, you’ll grow and belong here.\nBe Rewarded -Benefits That Help You Grow, Thrive, Belong\nComprehensive health coverage, generous PTO, and flexible work options\nLearning opportunities, career-mobility programs, and leadership workshops\nSixteen paid volunteer hours each year, global employee resource groups, and a “No Jerks” policy that keeps collaboration healthy\nModern offices with EV charging, healthy snacks, and culture celebrations\nCharitable Giving Program supported by Company Match\nWe practice pay transparency and reward performance; Offers reflect role location, internal equity, experience, skills, education, and certifications\nReady to Be the Difference?\nInfoblox is an Affirmative Action and Equal Opportunity Employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, national origin, genetic information, age, disability, veteran status, or any other legally protected basis.\n#LI- #LI-Remote","description_format":"text","description_chars":8103,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"Portuguese","level":"Advanced (C1)","optional":false},{"language":"Spanish","level":"Advanced (C1)","optional":true}]},"benefits":["Continuous learning","Equity","Flexible schedule","Home office"],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Infrastructure & Networking Services","Network Security"],"lifecycle":[{"event":"open","at":"2026-10-21T20:41:03Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":26,"reasons":["conf:5","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/infoblox-threat-researcher","json_url":"https://alion.io/job/infoblox-threat-researcher.json","meta":{"generated_at":"2026-10-23T06:26:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10462,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1761762},"rest":"https://alion.io/mcp/rest/get_company?id=1761762"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfoblox-threat-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfoblox-threat-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfoblox-threat-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infoblox-threat-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfoblox-threat-researcher"}]}