Whether you're an experienced professional or just getting started, your contributions matter at Fortra. If you're passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more! As a Threat Researcher, you will join Fortra's Managed Threat Intelligence group, a world-class team focused on generating actionable threat intelligence findings for clients of Fortra Managed Services. With a core focus on identifying Threat Actor TTPs, this role provides critical intelligence to both Fortra and clients to better understand and navigate the threat landscape WHAT YOU'LL DO Actively research a variety of cyber threats using technical analysis techniques, data analysis, and both open-source and deep/dark web intelligence gathering. Participate in a peer review process of intelligence deliverables by providing notes and constructive feedback. Analyze threats to identify novel adversary capabilities, tactics, techniques, and procedures. Conduct data analysis to identify notable trends and activity groups in email-delivered, Account Takeover, and Digital Impersonation activity across the cybercrime ecosystem. Monitor previously identified activity groups over time to track activity and evolution in their behavior. Other duties as assigned. QUALIFICATIONS 5+ years in security operations, or 1-3 years in intelligence analysis Strong understanding of social engineering techniques, phishing threats, and digital impersonation tactics. Fluent in reading web-based scripting languages including HTML, PHP, and JavaScript. Outstanding data analysis skills and experience with data analysis tools. Exceptionally strong analytical reasoning, problem solving, and decision-making skills. Experience analyzing email-based threats, including familiarity with SMTP and email header analysis. Exceptional research skills using both OSINT and private threat data. Experience querying both relational and non-relational databases. Experience with creating pattern matching signatures (Regex, YARA) and using querying languages (KQL, SQL). Able to effectively present analytical findings to a wide range of audiences. Ability to work independently and effectively as part of a remote team with minimal supervision. Relentless curiosity and desire to self-develop in order to keep up with the evolving threat landscape. Intermediate scripting knowledge, and a passion for automating routine or repetitive tasks. Familiarity with web-application penetration testing principles. Note: this job is not a pen-testing role. Experience analyzing web traffic using Wireshark, developer tools, or other mechanisms. Experience deobfuscating code to facilitate analysis. Able to effectively develop intelligence requirements to an RFI via interaction with stakeholders. Compensation: $55,000 - $100,000 At Fortra, we're breaking the attack chain. Ready to join us At Fortra, our compensation philosophy prioritizes fair market value and internal equity, aligning with your experience and specialized skill set. As a full-time, exempt employee at Fortra, you'll enjoy a comprehensive benefits package that includes: Health, dental, and vision coverage as of hire Immediate enrollment in 401(k), HSA, and FSA plans Flexible PTO policy Tuition and personal enrichment reimbursement Option to enroll in ID Theft Protection Program At Fortra, work is only part of the story. Explore what Life at Fortra is all about, from perks that support holistic wellbeing to a culture that keeps you connected and empowered to make an impact beyond the job. Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn. As an EEO/Affirmative Action Employer, all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status. Apply here: https://www.aplitrak.com/adid=YmJnZW5lcmljLjY2OTI1LjEwNTA2QGhlbHBzeXN0ZW1zY29tcC5hcGxpdHJhay5jb20
