Threat Researcher

Infoblox

3d•Remote

About The Position

Infoblox is hiring a developing Threat Researcher to join its ART (Axur Research Team), working from a home office in Brazil and reporting to the Supervisor, Threat Intelligence. The role investigates external cyber threats, including phishing, fraud, leaked credentials, malicious infrastructure, and threat-actor activity. The researcher turns evidence from OSINT, underground sources, internal datasets, and customer-provided information into clear, actionable intelligence. Working with Threat Intelligence, Engineering, Automation, Product, and customer-facing teams, the researcher will expand investigative coverage, improve repeatable workflows, and support AI-assisted research and reporting. The position emphasizes executing well-defined investigations, developing analytical judgment, and helping turn external threat visibility into meaningful protection. Success includes completing standard investigations independently, maintaining evidence quality and source traceability, producing accurate reports, contributing validated indicators and campaign relationships, and improving research workflows over time.

Requirements

Two or more years of experience in cyber threat intelligence, threat hunting, fraud analysis, digital risk protection, SOC operations, incident response, OSINT investigations, or a related cybersecurity field.
Practical experience investigating phishing, fraud, brand abuse, leaked data, malicious domains, credentials, malware, or threat actors.
Working knowledge of indicators of compromise, attack infrastructure, tactics, techniques, procedures, and confidence-based analysis.
Experience using OSINT and threat-intelligence tools to research domains, IP addresses, URLs, files, identities, infrastructure, or underground activity.
Ability to correlate evidence from multiple sources, distinguish facts from assumptions, and maintain clear source traceability.
Strong written communication skills and ability to produce structured, accurate, actionable intelligence reports.
Familiarity with spreadsheets, structured data, search operators, basic scripting, or query languages such as SQL.
Ability to use AI-assisted research and productivity tools thoughtfully, validate generated content, and follow data-protection guidelines.
Ability to collaborate effectively, manage priorities across multiple investigations, ask for guidance, and incorporate feedback.
Bachelor’s degree or equivalent practical experience in Cybersecurity, Computer Science, Information Technology, Intelligence, Journalism, Languages, or a related field.

Nice To Haves

Portuguese or Spanish proficiency.
Python skills.
Relevant certifications or training.

Responsibilities

Conduct end-to-end investigations into cyber threats, including phishing, brand abuse, fraud, leaked credentials, malware, and threat-actor activity.
Search authorized deep-web, dark-web, Telegram, underground forum, social-platform, and other sources for relevant artifacts.
Analyze URLs, domains, IP addresses, hashes, credentials, files, advertisements, and related evidence to identify malicious activity and exposure.
Enrich indicators using OSINT and threat-intelligence sources, including VirusTotal, URLScan, WHOIS, passive DNS, Certificate Transparency logs, sandboxes, and community feeds.
Correlate domains, hosting, certificates, campaigns, accounts, and actor behaviors to map phishing, fraud, and malware infrastructure.
Query internal datasets and approved intelligence platforms to identify patterns, quantify exposure, and connect findings across clients, brands, and campaigns.
Support investigations requiring careful communication, evidence collection, and interaction with threat actors under approved operational-security procedures.
Document investigative methods, evidence, confidence levels, limitations, and conclusions according to team standards.
Produce concise, evidence-based intelligence reports, investigation updates, campaign briefs, and executive summaries in English.
Contribute validated indicators, findings, and investigative context to internal intelligence platforms, monitoring workflows, and takedown or remediation processes.
Complete standard investigations independently, escalate appropriately, and meet team quality, documentation, and turnaround expectations.
Identify recurring patterns and turn them into reusable hunting, monitoring, or reporting improvements.
Deliver a meaningful workflow, automation, or AI-assisted improvement that increases research quality, efficiency, consistency, or analyst capacity.
Contribute to team knowledge sharing, peer review, onboarding, and cross-functional collaboration.