Senior Threat Intelligence Analyst at Recorded Future, Inc.

Role overview

This job description has been rewritten in fresh language using the facts in the listing. Source credit and original listing details are available below.

Recorded Future is hiring a Senior Threat Intelligence Analyst for its Advanced Cybercrime and Engagements Team within Insikt Group. This remote U.S. role focuses on researching criminal activity across dark web and underground sources—including forums, shops, marketplaces, and secure communications—to identify threat actors and cybercrime trends. Boston, Massachusetts, and Washington, D.C., are preferred locations.

The analyst will produce finished intelligence and proactive reports on cybercriminal actors, tools, services, tactics, campaigns, money laundering, hacktivism, and emerging threats. The work includes finding and maintaining access to underground sources and personas, engaging with threat actors to obtain nonpublic information, and collecting and curating intelligence for the Recorded Future Intelligence Cloud. Open-source intelligence, the Recorded Future Intelligence Operations Platform, and AI-assisted analysis support timely, actionable insights for customers and internal stakeholders.

The role combines proactive research with responses to requests from colleagues and customers. It also involves collaboration across the globally distributed Advanced Cybercrime and Engagements team and other Insikt Group teams, as well as contributing ideas for automation and AI-supported workflows. The full-time position has a base salary range of $129,000–$193,500 per year across U.S. locations; pay within the range depends on location and job-related factors. The role may also be eligible for incentive compensation, equity, and medical, dental, vision, life insurance, and 401(k) benefits.

Role at a glance: Remote U.S. senior analyst role researching cybercrime and underground threat activity, with a base salary range of $129,000–$193,500 per year.

Responsibilities mentioned in the listing

• Research, track, and write finished intelligence on cybercriminal actors, tools, services, sources, tactics, campaigns, and related subjects.
• Develop and publish proactive Analyst Notes and reports on emerging threats, dark web actors, money laundering, hacktivism, and cybercrime groups.
• Find, collect, and curate new data for the Recorded Future Intelligence Cloud, using AI-assisted triage.
• Establish and maintain access to underground sources and personas to obtain new intelligence.
• Engage with threat actors and conduct proactive research, while responding to relevant requests from colleagues and customers.
• Share research findings with customers and internal stakeholders, including through presentations.
• Suggest automations and AI-assisted workflows that improve production speed and consistency, and share lessons and practices with others.

Qualifications stated in the listing

• Fluent or professionally proficient in Russian.
• Strong knowledge of intelligence analysis, the intelligence cycle, OSINT collection, and intelligence writing methods.
• At least 3 years of professional experience in cyber intelligence, cybersecurity, cyber or cybercriminal investigations, or a related discipline.
• Advanced knowledge of operational security procedures and practices.
• Demonstrated experience using dark web forums, marketplaces, shops, and communications channels.
• Experience engaging with cybercriminals and participating in covert operations involving sensitive information.
• Knowledge of cybercriminal economies and regional landscapes, including communications channels, source locations, and operational security considerations.
• Experience handling, transacting in, and tracing cryptocurrency; knowledge of blockchain and cryptocurrency investigations.