Principal Threat Researcher (Unit 42)
About The Position
As a Principal Threat Researcher on the Unit 42 National Security (NATSEC) team, you will apply expert-level knowledge of nation-state advanced persistent threats, cybercrime, and emerging threat landscapes. The role calls for an independent self-starter who takes ownership of high-level tasking, closes priority research gaps, and conducts custom intelligence research. You will track global adversary trends, resolve requests for information (RFIs), and deliver actionable findings to support national security missions. You will also provide rapid-turnaround threat analysis during high-visibility cyber events and mentor junior analysts, contributing to broader company initiatives. This is a remote role. You will collaborate with internal research teams, product engineering, consulting, and sales, as well as national security stakeholders. The position requires translating complex technical findings into clear assessments and conducting analysis across closed and open-source datasets.
Requirements
- At least 7 years of experience in threat intelligence focused on ransomware, nation-state threats, cybercrime, and supply-chain risks.
- Expert understanding of adversary attack lifecycles, TTPs, and high-fidelity indicators of compromise.
- Experience with data analysis tools, including passive DNS, network infrastructure analysis, and host-based information analysis.
- Knowledge of scripting languages used to facilitate data collection and analysis.
- Demonstrated ability to independently lead tasks and projects and recommend process improvements.
- Strong problem-solving skills for navigating complex and ambiguous situations.
- Excellent verbal and written communication skills, with a record of collaborating across organizational levels.
Nice To Haves
- Experience mentoring, leading a team, or technically reviewing research outputs.
- Ability to interpret and act on internal and external intelligence reports.
- Ability to conduct dark-web research with appropriate operational security (OpSec).
- Familiarity with static and dynamic malware analysis tools.
- Prior experience working within or alongside government agencies or fusion centers.
- Experience speaking at large industry conferences.
- Comfort collaborating effectively within a fully remote team.
- Ability to adapt to change in a growing team and prioritize work according to project needs and deadlines.
Responsibilities
- Collect, correlate, and analyze threat data from disparate global datasets to develop cohesive intelligence assessments.
- Independently lead threat research initiatives by designing, developing, and maintaining tools and workflows.
- Translate complex technical findings into clear, audience-tailored assessments for national security stakeholders.
- Conduct pivot analysis across closed and open-source datasets to map command-and-control infrastructure and identify tactics, techniques, and procedures (TTPs).
- Deliver rapid-turnaround threat analysis and technical feedback during major cyber events and urgent customer RFIs.
- Collaborate with internal research teams, product engineering, consulting, and sales to support strategic alignment.
- Track global adversary trends, resolve RFIs, and produce actionable findings for national security missions.
- Mentor junior analysts and contribute to broader company initiatives.
Benefits
- The compensation may include restricted stock units and a bonus.
- Employee benefits are referenced, but specific benefits are not listed in the posting.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Principal
Education Level
No Education Listed
