Intelligence Research Lead

Job Purpose:

A highly skilled and experienced Senior Cyber Threat Research Analyst to play a technical leading role within the advanced intelligence research team, part of the Intelligence Fusion Center in our Managed Security Services (MSS). Reporting to the Cyber Threat Research Sr. Manager, the Intelligence Research Lead will focus on conducting in-depth analysis, advanced artifact research, and producing high-quality intelligence outputs that directly support MSSP operations and enhance client security postures. This senior role requires expertise in advanced threat research, artifact analysis, and intelligence generation, with a strong emphasis on delivering actionable insights to internal teams and external clients.

Core Responsibilities:

• Lead and conduct advanced threat research and in-depth analysis on cyber threats, including APTs, campaigns, malware, zero-day vulnerabilities, and adversary TTPs.
• Perform detailed artifact analysis, such as malware reverse engineering, forensic investigations, and network traffic analysis, to uncover IOCs and threat actor fingerprints.
• Produce high-quality, actionable intelligence reports, threat assessments, and briefings tailored to MSS clients and internal teams.
• Collaborate with internal teams to provide intelligence that enhances detection, response, and mitigation efforts.
• Mentor junior analysts, sharing expertise in advanced analysis techniques, tools, and intelligence production best practices.
• Act as a company subject matter expert (SME) for cyber threat intelligence related topics and engagements.
• Support MSS clients by delivering tailored intelligence outputs, participating in briefings, and addressing industry-specific risks.

","requirements":"

Qualifications:

• Bachelor s degree in Cybersecurity, Computer Science, Information Security, or related field. [Related cybersecurity professional certificates/licenses like GCTI or GREM are a plus]
• 5+ years of experience in cyber threat intelligence and advanced analysis roles (CTI or DFIR), with at least 2 years in a client service delivery or large enterprise capacity.
• Advanced expertise in artifact analysis, including malware reverse engineering, memory forensics, and advanced exploitation techniques.
• Proficiency in tools such as IDA Pro, Ghidra, Volatility, Wireshark, and YARA, as well as other advanced analysis platforms.
• Strong understanding of cyber threat intelligence frameworks such as MITRE ATT&CK, Diamond Model, and Cyber Kill Chain.
• Familiarity with SIEMs, Threat Intelligence Platforms (TIPs), XDR, Sandbox, and other MSSP tools and technologies.
• Proficiency in scripting or programming languages (e.g., Python, PowerShell) for automation and analysis tasks.
• Deep knowledge of adversary TTPs, campaign lifecycle analysis, and threat actor profiling.
• Excellent written and verbal communication skills, with the ability to convey complex concepts to both technical and non-technical audiences.
• Strong analytical and critical thinking skills, with a focus on delivering precise, actionable intelligence for internal and external stakeholders.
• Strong collaborative aptitude, fostering effective relationships across multiple teams.
• Ability to manage multiple priorities and deliver high-quality outputs under tight deadlines