Head of Threat Research

BitSight Technologies•Boston, MA

17h

About The Position

Bitsight is a cyber risk management leader whose integrated solutions help companies manage their own and third-party cyber exposure, performance, and risk. The Head of Threat Research will lead a high-impact team focused on expanding Bitsight’s ability to detect compromised systems worldwide. The role drives innovation in data collection, including broad-scale opportunistic domain sinkholing, bot emulation, and other malware tracking techniques, to build a large victim intelligence capability. The Head of Threat Research owns domain and malware triage workflows and sets priorities for targeted malware investigations. This person also champions the continued enhancement of Bitsight’s product features with evolving victim intelligence capabilities and data. The role leads a team of malware researchers and analysts and collaborates with product, engineering, and data science teams to turn threat telemetry into scalable product capabilities.

Requirements

Broad subject matter expertise across malware infrastructure and command-and-control methodologies.
Experience developing detection rules and extracting indicators of compromise (IOCs) from malware analysis.
Demonstrated experience managing and leading high-performing technical teams in a research or security-focused environment.
Demonstrated success architecting complex technical workflows, such as malware analysis, telemetry collection, or large-scale data processing.
Strong communication and analytical skills, including the ability to identify and solve ambiguous problems.
Proficiency in standard scripting languages such as Python or Go.
B.S. in Computer Science or a similar field, or commensurate experience.

Responsibilities

Establish team priorities for research and development of victim intelligence collection and analysis capabilities to maximize coverage of impactful victim intelligence.
Lead, mentor, and grow a team of malware researchers and analysts.
Spearhead development and deployment of next-generation malware emulators, trackers, and crawlers to collect infection telemetry.
Drive research into complex command-and-control communication channels, including P2P, direct IP, and hybrid models, to maintain botnet visibility.
Own victim intelligence data quality and drive continuous improvement.
Partner with product, engineering, and data science teams to translate threat telemetry into scalable product capabilities.
Own domain and malware triage workflows and set priorities for targeted malware investigations.
Advocate for enhancements to Bitsight product features using evolving victim intelligence capabilities and data.