Senior Threat Intelligence Researcher

ActiveFence

. Hunt, detect, monitor, and research threats against Alice clients .

Posted 10/6/2026full-timeLondon • United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in threat hunting and analysis, utilizing methodologies such as OSINT and WEBINT to produce actionable intelligence reports. Proficient in anti-bot detection, web scraping, and operating threat intelligence platforms to monitor and assess emerging threats.

Highest-signal resume keywords

Threat HuntingAnti-Bot DetectionOSINT MethodologiesTechnical Report WritingThreat Intelligence Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat AnalysisWeb Scraping DevelopmentTechnical CTIDatabase IntelligenceIPv4 IntelligencePython ScriptingBASH Scripting

Soft Skills

Strong English Communication

Tools & Technologies

VirusTotalUrlScanGreyhat WarfareShodanIntel471Recorded FutureCyberSixgillFlashpoint

Industry Keywords

Darkweb IntelligenceCybercrime IntelligenceThreat Actor TTPsClient ReportingAnalyst Tradecraft

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Hunt, detect, monitor, and research threats against Alice clients
Analyze threat groups and TTPs across different fraudulent ecosystems
Research and monitor multiple sources across the clear, deep, and dark web
Produce technical client reports describing threat actor TTPs, analysis, and exploits relevant to Alice’s clients
Work closely with client account leads, stakeholders, and fellow analysts to produce intelligence reports
Review, enrich, and provide analyst tradecraft for other team members
Prepare assessments of current threats and trends based on collection, research, and analysis of classified intelligence collected by the teams
Lead technical threat research and proactively monitor ongoing and emerging threats

Requirements

What you’ll need

Experience in anti-bot detection/research, proxy detection/research, or web scraping development/detection/prevention
Experience in technical CTI threat hunting, including databases and IPv4/IPv6 intelligence
Experience with VirusTotal, UrlScan, Greyhat Warfare, and Shodan
Experience analyzing threat groups and actors using OSINT and WEBINT methodologies
Darkweb and cybercrime intelligence experience
Strong English communication skills, including clearly communicating intelligence through reports and client/stakeholder briefings
Demonstrated experience gathering and evaluating internet information from social media, chats, and darknet forums
Scripting experience in Python, BASH, and/or equivalent is nice to have
Experience operating threat intelligence collection platforms such as Intel471, Recorded Future, CyberSixgill, Flashpoint, and/or equivalent is nice to have
Foreign language proficiency is nice to have