Threat Researcher
Abnormal Security · Remote - USA
About this role
**Threat Researcher — Abnormal AI (Threat Intelligence)** ## About the Role Abnormal AI is looking for a **Threat Researcher** to join our Threat Intelligence team. This is an analyst role for someone who enjoys both **understanding threats** and **turning intelligence into something useful for the audience**. You’ll conduct **original research** into active campaigns, attacker behavior, and emerging **email and identity attack techniques**—then **synthesize** inputs into clear, defensible intelligence products for security practitioners, customers, prospects, and internal teams. ## What You Will Do ### Analyze & Research - Independently scope and lead complex/ambiguous threat intelligence investigations (campaigns, attacker behavior, TTPs, emerging email/identity techniques) - Use Abnormal’s platform, internal telemetry, threat intel sources, and external research to build assessments - Identify meaningful patterns, connections, and emerging trends - Develop a strong understanding of how Abnormal detects and responds to the threats you analyze ### Synthesize Intelligence - Synthesize complex and sometimes conflicting intelligence into defensible assessments and recommendations - Determine what’s most relevant to the audience, customer situation, or business objective - Translate raw findings into insight, implications, recommendations, and a clear narrative - Connect technical threat activity to business risk and explain why it matters ### Create Intelligence Products Produce a range of deliverables, including: - Threat briefs - Analytical reports - Customer QBR intelligence content - Customer/prospect briefings - Webinars and presentations - Marketing/outreach content - Executive-level intelligence summaries You’ll also create both **rapid-turnaround** and **deep analytical** work, while maintaining high standards for sourcing, accuracy, clarity, and editorial quality. ### Engage Customers & Prospects - Lead customer/prospect intelligence engagements (briefings, webinars, presentations) - Adapt technical depth and narrative in real time and respond to challenging questions - Work with Sales and Customer Success to tailor intelligence to requests and context - Provide accurate, relevant, well-sourced analysis for time-sensitive questions and high-priority pursuits ### Partner Across the Organization - Collaborate with Threat Intelligence and Detection teams to incorporate research into customer-ready intelligence - Mentor P1/P2 analysts through coaching, peer review, and knowledge sharing - Partner with Sales, Customer Success, and Marketing to support upcoming moments and content needs - Feed insights from customer/field interactions back into Threat Intelligence priorities ### Work Smarter - Use AI tools (e.g., ChatGPT, Claude, Claude Code, Copilot) to accelerate research, synthesis, drafting, tailoring, and editing - Build workflows/automation to reduce routine work while maintaining analytical rigor - Apply human review/validation to ensure AI-assisted work is accurate and well-sourced ## What We’re Looking For ### Must Have - **4+ years** experience in threat intelligence, SOC operations, or a closely related cybersecurity discipline - Working knowledge of **email and identity attack techniques**; ability to explain IOCs, TTPs, campaigns, and threat behavior - Demonstrated experience conducting security research and producing written intelligence/content for different audiences - Strong ability to synthesize technical re
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.