{"id":3447768,"url":"https://alion.io/job/spidersilk-threat-intelligence-analyst-2","title":"Threat Intelligence Analyst","company":{"id":694348,"name":"spiderSilk","domain":"spidersilk.com","url":"https://alion.io/company/spidersilk","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":95,"open_postings":12,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":174,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Dubai, United Arab Emirates"],"countries":["AE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":36000,"max_usd":84000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Telegram","optional":false}],"status":"live","first_seen_at":"2025-10-01T07:52:54Z","employer_posted_date":"2025-10-01","last_verified_at":"2026-11-01T21:13:21Z","board_verified":true,"closed_at":null,"days_open":396,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":395},"description":"Who We Are!\nBack in 2019, spiderSilk was born with a bold idea: build a regional, sovereign cybersecurity IP that could stand tall on the global stage.\nOur mission? To shake up the way organizations protect their ever-changing digital worlds with continuous, intelligent, and autonomous security that doesn’t miss a beat.\nWe’re a global mix of curious minds, problem-solvers, and passionate builders, all united by one goal: making the internet a safer place for everyone. Around here, we thrive on vision, energy, and a strong sense of ownership.\nIf this feels like your kind of crew, you’ll probably fit right in.\nAbout the Role:\nAs a Senior Threat Intelligence Analyst, you will lead investigations into threat actor activity across the dark web, underground forums, Telegram and social media. You will research new threats and turn your findings into clear reports for spiderSilk’s clients and product teams.\nThis role requires strong investigative and analytical skills, a deep understanding of the cybercrime ecosystem, and hands-on experience with OSINT.\nResponsibilities:\nLead threat intelligence investigations for our clients, from scoping to final report.\n\nMonitor and investigate dark web forums, Telegram channels and infostealer logs for threats to our clients.\n\nValidate data breach and leak claims, and investigate leaked credentials and compromised accounts.\n\nResearch threat actors, campaigns and their TTPs.\n\nAnalyze IOCs (IPs, domains, URLs, hashes and email addresses) and pivot through attacker infrastructure.\n\nInvestigate malware, ransomware, phishing and DDoS activity.\n\nVerify claims seen on social media, Telegram and forums, including impersonation, misinformation and deepfakes.\n\nContribute to our existing product modules and our research in SOCMINT, brand protection, infostealer intelligence and AI-driven threat intelligence.\n\nWrite threat intelligence reports and threat landscape reports for clients, and present findings to technical teams and executives.\n\nRequirements:\n5+ years of experience in threat intelligence or cyber investigations.\n\nStrong OSINT skills.\n\nDeep knowledge of the cybercrime ecosystem: dark web forums, marketplaces, Telegram, infostealers, initial access brokers and ransomware groups.\n\nExperience validating data breaches and leaks.\n\nExperience building tools to automate collection or analysis.\n\nHands-on experience using AI and LLMs in research and analysis.\n\nStrong analytical and report-writing skills.\n\nStrong understanding of OPSEC.\n\nProactive and able to work independently.\n\nPreferred Qualifications:\nExperience conducting HUMINT or dark web engagement in a secure and ethical manner.\n\nForeign language skills relevant to threat actors (e.g., Arabic, Russian, Farsi, Mandarin).\n\nExperience detecting disinformation, influence operations or deepfakes.\n\nPrevious experience supporting law enforcement, CTI platforms, or security product development.\n\nKnowledge of the GCC threat landscape.\n\nCertifications such as GIAC GCTI, CREST CRTIA, or other intelligence-specific training.","description_format":"text","description_chars":3045,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Cybersecurity"],"lifecycle":[{"event":"open","at":"2026-10-29T09:16:01Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":1,"p_active":0.498,"p_room":0.28,"age_days":395,"expected_fill_days":174,"reasons":["conf:1","win:tail","crowd:"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/spidersilk-threat-intelligence-analyst-2","json_url":"https://alion.io/job/spidersilk-threat-intelligence-analyst-2.json","meta":{"generated_at":"2026-11-02T01:57:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2946,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":694348},"rest":"https://alion.io/mcp/rest/get_company?id=694348"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspidersilk-threat-intelligence-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspidersilk-threat-intelligence-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspidersilk-threat-intelligence-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spidersilk-threat-intelligence-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspidersilk-threat-intelligence-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3447768}},{"tool":"search_jobs","arguments":{"company":"spidersilk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3447768},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}