Threat Actor Engagement & Intelligence Consultant
New
G
GuidePoint SecurityCybersecurity
Remote (Anywhere in the U.S.)Full-TimeJunior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 2 - 4 years prior experience in communicating with threat actors; Two (2+) years of experience performing Threat Intelligence analysis and/or collection
- Required Skills
- Scripting
Requirements
- Have 2–4 years of experience communicating with threat actors through virtual persona operations, ransomware negotiations, or sock-puppet accounts in Deep and Dark Web collection.
- Have 2+ years of experience performing threat intelligence analysis and/or collection.
- Have experience in intelligence-sharing relationships or partnerships within the private sector, ISACs, government, or private intelligence-sharing groups.
- Have experience building and developing persona operations, including familiarity with dark web forums and marketplaces, adversary behavior, and trust mechanisms.
- Be familiar with digital forensics and incident response workflows, processes, and deliverables.
- Have experience in client-facing, professional services, or consulting roles.
- Have experience using emerging technologies, including AI tools, to solve problems and improve business outcomes.
- Be willing and able to support a rotating on-call schedule, including possible weekend work.
- Preferred: Be familiar with cryptocurrency tracing and blockchain technology.
- Preferred: Have experience implementing or improving intelligence lifecycle processes or procedures.
- Preferred: Have experience hunting APT data using open-source or commercial cyber threat analytic tools or repositories such as VirusTotal, Passive Total, Threat Miner, or Maltego.
- Preferred: Have experience scoping and conducting threat research on cybercrime, ransomware, and/or nation-state cyber operations.
Responsibilities
- Lead threat actor communications engagements and advise clients, legal counsel, and insurance carriers on risks, benefits, and considerations in ransomware and data extortion cases.
- Participate in DFIR investigations as a technical resource and identify actionable intelligence.
- Collaborate with peers and clients, manage engagement communications and time, and support client relationships.
- Author engagement deliverables for technical and managerial audiences, detailing findings, recommendations, business impact, and remediation strategies.
- Use automation, orchestration, and scripting to reduce manual processes and improve efficiency.
- Contribute to integrating open-source and commercial tools and automation into GRIT processes and procedures.
- Support a rotating on-call schedule, including possible weekend work for emergency requirements.
View Full Description & ApplyYou'll be redirected to the employer's site
