Threat Researcher

Role overview

Lead research into active cyber threats, attacker behavior, and emerging attacks on email and identity systems. The role combines independent investigation with the judgment to turn technical evidence into clear, useful intelligence for security teams, customers, executives, and business stakeholders. You will create both rapid updates and deeper analysis, and explain findings in written materials and live briefings.

Responsibilities

- Scope and conduct investigations into threat campaigns and techniques, assessing incomplete or conflicting evidence and developing well-supported conclusions. - Analyze internal telemetry, threat intelligence, and external research to identify patterns and emerging risks. - Combine research from multiple sources into tailored assessments, recommendations, and narratives that connect technical activity to business impact. - Produce threat briefs, analytical reports, executive summaries, customer materials, presentations, and webinars. - Present intelligence to customers and prospects, adjusting technical depth and responding to questions. - Work with research, detection, sales, customer success, and marketing colleagues; share field feedback and improve reusable content and workflows.

Requirements

- At least four years in threat intelligence, security operations, or a closely related cybersecurity field. - Working knowledge of email and identity attacks, including indicators, tactics, techniques, and campaigns. - Experience conducting security research and writing intelligence or security content for different audiences. - Strong analytical judgment: able to synthesize varied evidence, make defensible assessments, and recommend action with limited direction. - Familiarity with threat intelligence platforms, information-sharing communities, and threat hunting. - Clear writing and confident presentation skills, including experience engaging directly with customers or other stakeholders. - Basic SQL skills for retrieving, filtering, and analyzing data.

Nice to have

- Background in email security, phishing, anti-abuse, detection engineering, incident response, or security analysis. - Public security research, talks, webinars, or experience producing customer-facing intelligence and enablement materials. - Python or other scripting experience, mentoring experience, or relevant security certifications.