Mission

 Your daily work will consist of transforming chaotic data from illicit forums and black markets into strategic and actionable intelligence that protects our assets and those of our clients.

• Proactive investigation: Monitor deep web and dark web forums, as well as illicit marketplaces, to follow threat actors and detect emerging trends.
• Data validation: Validate leaked datasets in terms of authenticity, currency, and quality, evaluating the real impact on the business.
• Actionable reports: Prepare high-quality intelligence reports, adapted for both technical teams and executive audiences.

What we are looking for

• Solid experience: Proven track record in Threat Intelligence focused on data breaches and cybercrime ecosystems.
• Proven ability to investigate deep/dark web forums and illicit marketplaces, tracking threat actors and emerging trends.
• Practical experience with infostealer logs, combo lists, and compromised database formats for rapid triage and enrichment.
• Technical investigation: Demonstrated ability to navigate illicit marketplaces and track sophisticated actors.
• Ability to validate leaked datasets (authenticity, validity, and quality) and evaluate the impact on clients and business.
• OPSEC Mentality:Disciplined approach to operating under strict legal, ethical, and security constraints.
• Comfort in using OSINT tools and automation/scripting (preferably Python) to scale research.

Languages

• English: Mandatory (full professional proficiency, both written and spoken, is strictly required).
• Russian, Chinese or Arabic: Highly valued. Proficiency in one or more of these languages represents a significant competitive advantage for navigating high-level threat actor ecosystems.