Cyber Threat Researcher

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Cyber Threat Researcher based in United Kingdom.

This is an intelligence-focused cybersecurity role dedicated to tracking financially motivated cyber threat actors and understanding activity across the criminal underground.

You will conduct research across open and restricted-access sources to uncover emerging threats, actor behaviors, motivations, capabilities, and attack patterns.

Your intelligence will help security, fraud, and threat intelligence teams better understand adversaries and proactively mitigate cyber risk.

The role combines investigative research, virtual human intelligence, operational security, technical analysis, and concise intelligence reporting.

You will contribute to both ongoing monitoring and specialized research projects involving cybercriminal infrastructure, malware campaigns, and compromised data.

Working as part of a globally distributed team, you will have significant autonomy while collaborating closely with experienced cyber threat researchers.

This opportunity is ideal for a curious, analytical cybersecurity professional who is passionate about cybercrime intelligence and wants to operate at the forefront of threat research.

Accountabilities:

• Identify intelligence and knowledge gaps and develop research leads that address customer intelligence collection requirements.
• Continuously monitor open and restricted-access sources, including underground forums, marketplaces, instant messaging groups, and other cybercriminal ecosystems.
• Research threat actors and groups to understand their motivations, objectives, targets, capabilities, behaviors, and tactics, techniques, and procedures (TTPs).
• Proactively track financially motivated cyber threat actors and conduct research to identify and attribute relevant activity.
• Conduct virtual human intelligence (vHUMINT) collection activities within cybercrime-focused environments where appropriate.
• Develop and manage research personas while maintaining strong operational security and OPSEC practices.
• Contribute to specialized research projects involving cybercriminal infrastructure, malware campaigns, cybercriminal commodities, compromised data, and related underground activity.
• Collaborate with other researchers and intelligence professionals on complex investigations and emerging threat topics.
• Communicate research findings, intelligence collection results, and analytical assessments through clear, concise, and actionable reporting in English.
• Respond to customer Requests for Information (RFIs) and provide timely support for ad-hoc intelligence requests from internal teams.
• Proactively identify emerging developments within the cybercrime ecosystem and contribute them to broader intelligence efforts.
• Work independently on proactive research initiatives while maintaining close collaboration with the wider global research team.

Requirements:

• Demonstrated professional experience in cyber threat research, cybercrime investigation, threat intelligence, or a closely related field.
• In-depth understanding of the cyber threat landscape, including threat actors, criminal groups, motivations, objectives, tools, capabilities, risks, attacks, and campaigns.
• Previous hands-on experience monitoring and researching cybercrime underground environments, including restricted-access forums, marketplaces, instant messaging channels, and other criminal ecosystems.
• Strong understanding of operational security (OPSEC), particularly when conducting research within cybercriminal environments.
• Experience creating, developing, and managing personas for intelligence collection in cybercrime-focused environments is highly valued.
• Hands-on experience with virtual human intelligence (vHUMINT) collection methods is an advantage.
• Technical knowledge of malware analysis, exploits, vulnerabilities, or related cybersecurity topics is beneficial.
• Strong investigative, analytical, and critical-thinking skills, with the ability to identify meaningful intelligence from large volumes of information.
• Ability to work independently and proactively with limited direction while also contributing effectively within a close-knit global team.
• Excellent written, verbal, and interpersonal communication skills in English.
• Professional proficiency in at least one additional language: Portuguese, Spanish, Italian, or French.
• Strong ability to produce clear, concise, and actionable intelligence reporting for technical and non-technical audiences.
• A degree in Cybersecurity, Intelligence Analysis, Computer Science, or a related discipline is highly desirable.
• Curiosity, discretion, integrity, attention to detail, and a strong sense of professional responsibility are essential for working with sensitive intelligence.
• Comfortable operating in a fast-paced environment where priorities and threat landscapes can evolve quickly.

Benefits:

• Market-competitive compensation.
• Fully remote opportunity for candidates based in Europe.
• Remote-friendly culture built around trust, collaboration, and autonomy.
• Wellness programs supporting employee health and well-being.
• Employee recognition program.
• Multiple professional development and learning opportunities.
• Opportunity to work alongside experienced cybersecurity and intelligence professionals.
• Exposure to complex, real-world cybercrime investigations and emerging threat activity.
• Collaborative, inclusive, and supportive international work environment.
• Opportunity to contribute to a mission-driven cybersecurity function focused on helping organizations proactively understand and mitigate threats.
• Culture centered on openness, inclusion, integrity, client focus, and continuous growth.