Head of Threat Research

Bitsight•Boston, MA

1d•$156,000 - $195,000

About The Position

Bitsight is a cyber risk management company whose integrated solutions address enterprise security performance, digital supply chains, cyber insurance, and data analysis. The Head of Threat Research will lead a team expanding Bitsight’s ability to detect compromised systems worldwide. The role drives innovation in data collection, including broad-scale opportunistic domain sinkholing, bot emulation, and other malware-tracking techniques, to build victim intelligence capabilities. It owns domain and malware triage workflows, sets priorities for targeted malware investigations, and champions the development of product features using evolving victim intelligence capabilities and data. The position partners with product, engineering, and data science teams to turn threat telemetry into scalable product capabilities. It also leads malware researchers and analysts and is responsible for victim intelligence data quality and continuous improvement.

Requirements

Broad subject matter expertise across malware infrastructure and C2 methodologies.
Experience developing detection rules and extracting IOCs from malware analysis.
Demonstrated experience managing and leading high-performing technical teams in a research or security-focused environment.
Demonstrated success architecting complex technical workflows, such as malware analysis, telemetry collection, or large-scale data processing.
Strong communication and analytical skills, including the ability to identify and solve ambiguous problems.
Proficiency in standard scripting languages such as Python or Go.
B.S. in Computer Science or a similar field, or commensurate experience.

Responsibilities

Establish team priorities for research and development of victim intelligence collection and analysis capabilities to maximize coverage of impactful victim intelligence.
Lead, mentor, and grow a team of malware researchers and analysts.
Develop and deploy next-generation malware emulators, trackers, and crawlers to collect infection telemetry.
Lead research into complex C2 communication channels, including P2P, direct IP, and hybrid models, to maintain visibility over botnets.
Own victim intelligence data quality and drive continuous improvement.
Partner with product, engineering, and data science teams to translate threat telemetry into scalable product capabilities.
Own domain and malware triage workflows and set priorities for targeted malware investigations.
Advocate for enhancing Bitsight’s product features with evolving victim intelligence capabilities and data.