Cyber Threat Researcher

About the Role

We are looking for a detail-oriented and analytically driven Cyber Threat Researcher to join our network threat research team. In this role, you will dive deep into network traffic, hunt for hidden threats, collect and validate actionable threat intelligence, and produce high-impact technical content. You will track emerging adversary techniques, map them to industry frameworks, and continuously improve our detection capabilities and simulation scenarios.

Key Responsibilities

• Collect, correlate, and analyze threat intelligence sources to extract actionable insights that enhance detection, response, and prevention strategies.

• Perform in-depth network packet analysis using Wireshark to identify malicious activity, protocol anomalies, and attack indicators.

• Analyze network traffic flows and behaviors using Zeek, Suricata, and Deep Packet Inspection (DPI) engines.

• Author and edit technical articles, ensuring clear, accurate, and actionable guidance for the global security community.

• Monitor emerging threats, adversary tactics, and infrastructure trends; map findings to the MITRE ATT&CK framework.

• Design and propose new attack simulation scenarios, detection rules, and research features to proactively counter evolving adversary behaviors.

• Conduct proactive threat hunting within customer NDR (Network Detection and Response) datasets to validate detection efficacy and uncover stealthy threats.

Required Qualifications

• 1–3 years of hands-on experience in cybersecurity, with a focus on network security, threat intelligence, or security research.

• Strong working knowledge of Linux environments and proficiency with command-line networking and analysis tools.

• Demonstrated experience with packet capture analysis and frame-level debugging using Wireshark.

• Practical experience deploying and managing virtualized lab environments (e.g., VMware, ESXi, Ubuntu).

• Hands-on experience or strong familiarity with Zeek, Suricata, and/or DPI technologies for network traffic analysis.

• Solid understanding of the MITRE ATT&CK framework and experience mapping threats or adversary behaviors to it.

• Excellent technical writing skills with the ability to translate complex security findings into clear, structured, and actionable reports or articles.
  
  
  Preferred Qualifications (Nice to Have)

• Experience with NDR/SIEM platforms, security telemetry analysis, or automated threat hunting.

• Scripting/automation skills (Python, Bash, PowerShell) for research, detection development, or data processing.

• Relevant cybersecurity certifications are preferred

• Hands-on penetration testing expertise across networks, web applications, databases, and OS environments, with strong web security fundamentals and proficiency in tools like Burp Suite, Nessus, SQLmap, and Metasploit/Kali Linux.