Outbound Researcher

Dream

. Conduct investigations into threat actors, adversary infrastructure, malware campaigns, vulnerabilities, and emerging activity .

Posted 11/1/2026full-timeTel Aviv • IsraelMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Threat Intelligence, including threat actor investigations, malware analysis, and incident response. Proficient in translating findings into actionable intelligence and collaborating with diverse teams to enhance security capabilities.

Highest-signal resume keywords

Cyber Threat IntelligenceMalware AnalysisIndicators Of Compromise (IOCs)Python ProgrammingSTIX 2.1

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat Actor InvestigationAdversary Infrastructure ResearchIncident Response IntelligenceAnalytical WritingCampaign Assessment

Soft Skills

Relationship BuildingAnalytical ThinkingPresentation Skills

Tools & Technologies

VirusTotalDNSDBCensysShodanMISP

Industry Keywords

DNSPassive DNSIP AddressingMITRE ATT&CKPhishing Infrastructure

Tech Stack

Tools & technologies

CloudDNSElasticSearchNeo4jPython

About the role

Key responsibilities & impact

Conduct investigations into threat actors, adversary infrastructure, malware campaigns, vulnerabilities, and emerging activity
Expand investigations by analyzing relationships among domains, IP addresses, autonomous systems, certificates, passive DNS records, files, URLs, hosting providers, and registration data
Form and test intelligence hypotheses, assess attribution, and distinguish confirmed evidence from analytical judgments and unresolved questions
Identify, validate, prioritize, and track Indicators of Compromise (IOCs)
Translate findings into detections, hunting opportunities, watchlists, and early-warning intelligence
Write threat research reports, technical blogs, campaign analyses, executive briefs, and customer-facing publications
Build relationships with researchers, security vendors, CERTs, CSIRTs, ISACs, academic teams, and other CTI partners
Support intelligence sharing and joint research when appropriate
Work with Marketing, PR, and Communications on publication launches, media materials, webinars, conference content, and external briefings
Collaborate with Engineering, MLOps, Data, and Product teams on scalable intelligence capabilities
Follow sourcing, provenance, responsible-disclosure, legal, and data-quality requirements

Requirements

What you’ll need

At least 3 years of hands-on experience in Cyber Threat Intelligence, adversary infrastructure research, malware or campaign analysis, incident-response intelligence, EASM, or a related field
Strong understanding of DNS, passive DNS, IP addressing, ASNs, hosting and cloud providers, TLS/PKI, domain lifecycles, registration data, and phishing infrastructure
Hands-on experience with commercial and open-source intelligence platforms such as VirusTotal, DNSDB, Censys, Shodan, SecurityTrails, MISP, or OpenCTI
Working knowledge of STIX 2.1, MITRE ATT&CK, TAXII, the intelligence lifecycle, and structured analytical techniques
Ability to investigate an initial indicator through infrastructure expansion, campaign assessment, confidence evaluation, and defensive recommendations
Strong analytical writing and presentation skills, with the ability to explain technical findings, evidence limits, and uncertainty to researchers, customers, executives, and public audiences
Interest in building professional relationships across the CTI community and working with external partners, PR teams, and communications teams
Experience using Python, notebooks, or similar tools for enrichment, analysis, automation, and reproducible research
Published threat research, conference or webinar experience, and participation in intelligence-sharing communities are strong advantages
Familiarity with Neo4j or Elasticsearch is a plus

Benefits

Comp & perks

Remote/hybrid work arrangement
Full-time employment