Threat Intelligence Analyst
Confirmed on the employer's own hiring board on Oct 30, 2026. First seen by Alion on Oct 1, 2025. spiderSilk scores A on the Alion truth index.
Who We Are!
Back in 2019, spiderSilk was born with a bold idea: build a regional, sovereign cybersecurity IP that could stand tall on the global stage.
Our mission? To shake up the way organizations protect their ever-changing digital worlds with continuous, intelligent, and autonomous security that doesn’t miss a beat.
We’re a global mix of curious minds, problem-solvers, and passionate builders, all united by one goal: making the internet a safer place for everyone. Around here, we thrive on vision, energy, and a strong sense of ownership.
If this feels like your kind of crew, you’ll probably fit right in.
About the Role:
As a Senior Threat Intelligence Analyst, you will lead investigations into threat actor activity across the dark web, underground forums, Telegram and social media. You will research new threats and turn your findings into clear reports for spiderSilk’s clients and product teams.
This role requires strong investigative and analytical skills, a deep understanding of the cybercrime ecosystem, and hands-on experience with OSINT.
Responsibilities:
Lead threat intelligence investigations for our clients, from scoping to final report.
Monitor and investigate dark web forums, Telegram channels and infostealer logs for threats to our clients.
Validate data breach and leak claims, and investigate leaked credentials and compromised accounts.
Research threat actors, campaigns and their TTPs.
Analyze IOCs (IPs, domains, URLs, hashes and email addresses) and pivot through attacker infrastructure.
Investigate malware, ransomware, phishing and DDoS activity.
Verify claims seen on social media, Telegram and forums, including impersonation, misinformation and deepfakes.
Contribute to our existing product modules and our research in SOCMINT, brand protection, infostealer intelligence and AI-driven threat intelligence.
Write threat intelligence reports and threat landscape reports for clients, and present findings to technical teams and executives.
Requirements:
5+ years of experience in threat intelligence or cyber investigations.
Strong OSINT skills.
Deep knowledge of the cybercrime ecosystem: dark web forums, marketplaces, Telegram, infostealers, initial access brokers and ransomware groups.
Experience validating data breaches and leaks.
Experience building tools to automate collection or analysis.
Hands-on experience using AI and LLMs in research and analysis.
Strong analytical and report-writing skills.
Strong understanding of OPSEC.
Proactive and able to work independently.
Preferred Qualifications:
Experience conducting HUMINT or dark web engagement in a secure and ethical manner.
Foreign language skills relevant to threat actors (e.g., Arabic, Russian, Farsi, Mandarin).
Experience detecting disinformation, influence operations or deepfakes.
Previous experience supporting law enforcement, CTI platforms, or security product development.
Knowledge of the GCC threat landscape.
Certifications such as GIAC GCTI, CREST CRTIA, or other intelligence-specific training.