Threat Researcher

Job not on LinkedIn

🔥 5 minutes ago

🇺🇸 United States – Remote

💵 $122.4k - $176k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Abnormal Security

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Abnormal Security is a provider of cloud-native email security solutions that specializes in preventing a wide array of cyber threats. The company focuses on protecting businesses from attacks such as phishing, malware, ransomware, and social engineering, ensuring total protection for corporate email systems. Their offerings include business email security, phishing detection, and securing against account takeovers, making them a leader in the computer and network security space.

📋 Description

• Conduct original research into active campaigns, attacker behavior, and emerging email and identity attack techniques • Scope and lead complex or ambiguous threat intelligence investigations • Use Abnormal's platform, internal telemetry, threat intelligence sources, and external research to investigate threats • Identify meaningful patterns, connections, and emerging trends across threat activity • Develop defensible intelligence assessments and recommendations • Synthesize complex intelligence from disparate sources into audience-tailored narratives • Translate raw findings into insights, implications, recommendations, and clear narratives • Produce threat briefs, analytical reports, customer QBR content, customer and prospect briefings, webinars, presentations, marketing content, and executive summaries • Create rapid-turnaround intelligence products and deeper analytical work • Build reusable narratives, templates, and content structures • Lead customer and prospect intelligence engagements, including briefings, webinars, and presentations • Respond to time-sensitive customer questions and high-priority pursuits • Collaborate with Threat Intelligence, Detection, Sales, Customer Success, and Marketing teams • Mentor P1 and P2 analysts through coaching, peer review, and knowledge sharing • Provide enablement materials for go-to-market teams • Feed customer and field insights back to Threat Intelligence teams • Use AI tools and automation to accelerate research, synthesis, drafting, tailoring, and editing while applying human review and validation

🎯 Requirements

• 4+ years of experience in threat intelligence, SOC operations, or a closely related cybersecurity discipline • Working knowledge of email and identity attack techniques, IOCs, TTPs, attack campaigns, and threat behavior • Experience conducting security research and producing written intelligence or security content for different audiences • Ability to synthesize technical research and data from multiple sources into intelligence assessments, narratives, and recommendations • Analytical judgment in complex or ambiguous investigations and ability to evaluate incomplete or conflicting evidence • Familiarity with threat intelligence platforms, intelligence-sharing communities, and threat hunting concepts • Strong writing skills for communicating complex technical subjects clearly and concisely • Ability to present complex technical intelligence to customers, executives, security practitioners, or other stakeholders • Experience working directly with customers or cross-functional stakeholders and translating technical findings into business relevance • Proficiency with AI tools such as ChatGPT, Claude, Claude Code, Copilot, or similar tools • Strong project management and prioritization skills • Ability to remain calm, accurate, and responsive in high-pressure or time-sensitive situations • Ability to independently scope, prioritize, and deliver complex intelligence work from investigation through customer-ready communication • Ability to strengthen other analysts' technical capabilities through peer review, knowledge sharing, coaching, and collaborative problem-solving • Demonstrated use of AI tools or automation to scale research, analysis, or content production • Working knowledge of the MITRE ATT&CK framework and common attack techniques, including phishing, BEC, credential harvesting, malware, and account takeover • Basic proficiency in SQL, including writing and modifying queries • Nice to have: experience in email security, phishing detection, anti-abuse systems, email threat containment, detection engineering, incident response, Abnormal Security or similar platforms, public-facing security content, customer-facing security engagements, training or enablement materials, mentoring analysts, Python or scripting, and security certifications such as Security+, GIAC, CISSP, or CEH

🏖️ Benefits

• Bonus or incentive compensation eligibility • Equity eligibility • Comprehensive benefits package • Pre-employment checks conducted in line with applicable legislation and company policies