Senior Threat Intelligence Analyst

Recorded Future

. Research and analyze criminal activity on dark web and underground platforms to identify cybercrime trends and threat actors .

Posted 10/30/2026full-timeRemote • United StatesSenior💰 $129,000 - $193,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber intelligence and analysis, with a strong focus on dark web research, threat actor engagement, and the use of AI tools for intelligence gathering and reporting. Proficient in documenting and presenting findings, with a solid understanding of the cybercriminal landscape and operational security practices.

Highest-signal resume keywords

Fluency In RussianCyber Intelligence AnalysisOpen-Source Intelligence GatheringExperience With Dark Web SourcesKnowledge Of Cryptocurrency Investigations

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Analytic TradecraftIntelligence CycleOperational Security (OPSEC)Blockchain InvestigationsCybercrime TTPsMalware TrendsCryptocurrency TransactionsResearch WritingData CurationThreat Actor Engagement

Soft Skills

Collaborative WorkPresentation SkillsDocumentation SkillsCritical ThinkingCommunication Skills

Tools & Technologies

Recorded Future Intelligence Operations PlatformAI ToolsClaudeChatGPTAI-Assisted Workflows

Industry Keywords

Cyber IntelligenceCybersecurityCybercriminal InvestigationsDark WebMoney LaunderingFraudHacktivismCybercriminal EcosystemExtremist OperationsState-Sponsored Operations

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Research and analyze criminal activity on dark web and underground platforms to identify cybercrime trends and threat actors
Identify sources, maintain persistence on those sources, and interact with threat actors to obtain non-public information
Conduct proactive research and respond to colleague and customer requests about cybercriminal activities
Use OSINT, Recorded Future Intelligence Operations Platform, and AI to provide timely, actionable intelligence
Research, track, and author finished intelligence reports on threat actors, malicious tools and services, source types, TTPs, campaigns, and cybercriminal topics
Identify, propose, and publish proactive Analyst Notes and reports on emerging threats, dark web actors, money laundering operations, hacktivists, and cybercriminal groups
Drive sourcing, collection, and curation of new data into the Recorded Future Intelligence Cloud using AI-assisted triage
Create and maintain access to underground sources and personas
Contribute ideas for automations and AI-assisted workflows to improve production speed and consistency
Share lessons learned and best practices broadly
Cross-collaborate with other Insikt Group teams on research projects and customer requests

Requirements

What you’ll need

Fluency or professional proficiency in Russian
Strong knowledge and experience with analytic tradecraft, the intelligence cycle, open-source intelligence gathering techniques, and intelligence writing
Ability to document and explain research findings to customers
Ability to present research findings to customers and at conferences
3+ years of professional experience in cyber intelligence, cybersecurity, cyber and cybercriminal investigations, or related disciplines
Advanced knowledge of operational security (OPSEC) procedures and practices
Demonstrated experience operating on dark web sources, including forums, marketplaces, and shops
Experience engaging with cybercriminals and participating in covert operations while handling sensitive information
Knowledge of cybercriminal economy and landscape structures and trends
Experience handling, transacting in, and tracing cryptocurrencies
Knowledge of and ability to conduct blockchain and cryptocurrency investigations
Knowledge of money laundering, fraud, and current cybercrime TTPs
Ability to work collaboratively in a globally distributed environment
Regular hands-on use of AI tools such as Claude or ChatGPT in research and writing
Ability to write clear AI prompts and fact-check and edit AI output
BA/BS or MA/MS degree or equivalent experience in Computer Science, International Relations, Security Studies, Regional Studies, Criminology, or related discipline (preferred)
Knowledge of the cybercriminal ecosystem (preferred)
Knowledge of links between cybercriminal, hacktivist, extremist, and state-sponsored operations (preferred)
Technical knowledge of malware trends, including ransomware (preferred)
Practical experience integrating or leveraging LLMs in applications, tools, or workflows (preferred)

Benefits

Comp & perks

Incentive compensation eligibility
Equity eligibility
Medical insurance
Dental insurance
Vision insurance
Life insurance
401K
Accommodation or special assistance during the application process
Equal opportunity and affirmative action employer
Drug-free workplace