Remote job
Senior / Staff Cyber Threat Response Advisor
Job details
About this role
Role overview Analyze cyber risks affecting critical infrastructure and turn scattered signals into practical guidance for defenders. This senior individual contributor role combines threat intelligence, exposure discovery, and direct partner engagement, with responsibility for taking analysis from initial lead through actionable notification and remediation support.
Responsibilities - Assess critical infrastructure sectors and identify organizations whose exposure could have significant consequences. - Combine open source research, external attack surface discovery, and threat actor collection to validate vulnerabilities and likely threats. - Map threat actors, malware, command-and-control infrastructure, and tactics to explain how threats operate. - Triage large sets of indicators and exposures, clustering related infrastructure into defensible findings. - Produce actionable exposure notices, actor and campaign profiles, indicator packages, and infrastructure attributions. - Advise infrastructure organizations and coordinate with government partners, information sharing groups, engineers, and analysts. - Build AI-assisted research workflows, check their outputs, and share effective methods to scale the team’s work.
Requirements - 5–8+ years in cyber threat intelligence, incident response, or a closely related analytical field. - Experience serving as the primary contact for an external organization during a live incident or remediation effort. - Ability to independently turn fragmented information into concrete outcomes and deliver under urgent, partner-driven timelines. - Practical experience building AI-assisted or agentic analysis workflows, including validating results and understanding failure modes. - Demonstrated collection capability in at least one area: open web, social or forum research; external exposure discovery; or direct threat actor collection. - Strong analytical judgment and the ability to communicate findings that defenders and partner organizations can act on.