Role Description As a Senior Threat Intelligence Researcher, you'll lead deep-dive investigations into both emerging & known threats, while maintaining a vigilant watch over malware developments to ensure defenses remain a step ahead of evolving attack methods. You'll put into use your ability to synthesize complex data into actionable intelligence and provide senior management with the clear briefings necessary to understand and mitigate potential risks. Furthermore, you'll be expected to develop refined hunting strategies to adapt to and anticipate shifts in threat actor tactics & techniques, and to track adversary infrastructure, effectively counteracting shifts in threat actor tactics through detail-oriented investigation. What Will You Do? - Drive External Threat Research: - Triage and evaluate findings from OSINT and lead in-depth investigations into emerging threats. - Systematically evaluate signals from the global OSINT community and dark web forums to determine their fidelity, relevance, and impact. - Synthesize Actionable Intelligence: - Transform raw data from dark web forums, leak sites, and research repositories into high-level threat briefings and risk assessments for senior stakeholders. - Adversary Knowledge Management: - Curate and expand our internal Knowledge Base and IOCs collections. - Track Actor Tradecraft (TTPs): - Monitor adversary behaviors across the open and deep web to identify shifts in recruitment, target selection and shifting of operations. - Pivot Across Infrastructure: - Identify and map threat actor footprints by pivoting through domain registrations, SSL certificates, passive DNS. - Bridge Intelligence Gaps: - Collaborate closely with Detection Engineering to translate validated OSINT findings into durable hunting logic. - Develop OSINT Tooling: - Build and automate scrapers, monitors, and data-visualization tools to identify anomalies and track threats in external telemetry. Qualifications - A Threat Intelligence / Threat hunting background. - Knowledge of the cyber threat landscape, including actors and TTPs. - Strong analytical skills, with the ability to identify patterns and trends in large datasets. - Programming skills in Python and knowledge of databases (SQL, noSQL). - Strong knowledge of YARA to track new malware families and knowledge on validation best practices. - Knowledge of MITRE ATT&CK, CISA KEV, EPSS, AMITT, MISP Galaxy. Requirements - Strongly preferred: - Knowledge of malware analysis tools and techniques, including static and dynamic analysis, sandboxing, and debugging. - Technical writing & content development skills. - Nice to have: - Understanding software vulnerabilities, and ability to implement hunting strategies to track and discover them. - Knowledge about internal working of EDR products. - Relevant certifications, such as Certified Malware Analyst (CMA), Certified Reverse Engineering Analyst (CREA), or GIAC Certified Malware Reverse Engineer (GREM). Benefits - Salary starting from 4500 EUR/month. - Annual bonus based on company performance, paid in two installments. - Equity & Rewards: - Restricted Stock Units (RSUs). - Employee Stock Purchase Plan (ESPP). - Time Off & Wellbeing: - Competitive leave benefits. - Gender-neutral parental leave. - Insurance & Financial Security: - Medical and insurance benefits. - Pension. - Employee Assistance Program (EAP). - Work Perks & Flexibility: - Global home office allowance. - Wellness & Lifestyle: - Meal allowance.

Role Description We are seeking a motivated Intelligence Analyst to join our team in an embedded role supporting a global technology company. Working remotely (eligible states) from within the United States and reporting to the Embedded Intelligence Team Lead, the successful candidate will join a small team responsible for delivering timely, actionable intelligence across the Americas and Europe. This role offers an excellent opportunity for an early-career intelligence professional to develop their analytical skills while supporting stakeholders in understanding emerging risks and developments that may impact people, assets, operations, and reputation. The Intelligence Analyst will: - Conduct all-source research, monitoring, and analysis to identify emerging threats, incidents, risks, and trends relevant to the client’s operating environment. - Support the production of intelligence assessments, briefings, and situational awareness updates. - Respond to stakeholder requests for information and contribute to incident response and crisis support activities. - Help deliver accurate, timely, and actionable intelligence that supports operational and strategic decision-making. This position requires strong research and analytical skills, attention to detail, and the ability to manage competing priorities in a fast-paced environment. Candidates should be comfortable working with open-source information, monitoring emerging developments, and communicating findings clearly to a variety of audiences. Familiarity with threat monitoring platforms, AI-assisted analytical tools, and collaborative technology environments is highly desirable. This is a full-time remote position based in the United States, working standard business hours Monday through Friday. The successful candidate will work closely with fellow analysts, client stakeholders, and Sibylline support teams while benefiting from ongoing mentorship, training, and professional development opportunities within a collaborative and high-performing team environment. Qualifications - Bachelor’s degree in International Relations, Security Studies, Criminal Justice, Journalism, or a relevant field from an accredited college or university; or equivalent professional experience. - 1–3 years of relevant experience in corporate intelligence, security intelligence, geopolitical risk, investigations, journalism/research, or adjacent roles supporting operational decision-making. - Foreign language proficiency a plus. Requirements - Demonstrated interest in geopolitical analysis, threat monitoring, activism-related issues, or operational security topics preferred. - Ability to translate complex threat and risk information into concise, actionable intelligence for security and operational stakeholders. - Foundational understanding of all-source research methodologies, OSINT collection techniques, and analytical tradecraft. - Working knowledge of the intelligence cycle and briefing standards; able to produce clear, well-structured written products and verbal updates. - Experience (or demonstrated interest in) monitoring threats that can impact private-sector people, facilities/assets, operations, and reputation. - Sound judgment, attention to detail, and the ability to stay composed in demanding environments with competing priorities. - Comfortable working within defined SOPs and workflows while contributing ideas for continuous improvement. - Collaborative, stakeholder-focused approach; able to work effectively in a matrixed environment across client and Sibylline structures. - Experience leveraging intelligence, monitoring, and productivity technologies to support program delivery and continuous improvement. - Excellent written and verbal English communication skills. Benefits - Salary Range: $80,000 to $85,000 - 401(k) up to 5% matching - Medical/Dental/Vision - Basic Life and AD&D Insurance - Long Term/Short Term Disability - PTO: 160 hours (20 days) accrued per year - Sick: dependent on state - Holidays - Employee Assistance Program and Employee Discount Program

• Lead and mentor a small, embedded intelligence team, setting daily/weekly priorities, delegating tasks, and ensuring consistent, high-quality delivery. • Partner with security stakeholders to define key intelligence requirements and maintain a clear tasking and escalation framework for routine reporting, RFIs, and incident-driven support. • Oversee all-source monitoring and analysis to identify emerging threats, security incidents, reputational risks, and trends. • Produce and quality-assure concise, actionable intelligence products and verbal briefings designed to inform operational and leadership decision-making. • Maintain and continuously improve SOPs, definitions, and analyst workflows for monitoring, incident response support, and reporting; identify gaps and redundancies and propose improvements. • Personally contribute to complex intelligence assessments and high-visibility stakeholder requests as required.

• Support intelligence efforts for global operations, travel security, data center security, executive protection, and market expansion initiatives. • Monitor and assess global events including armed conflict, terrorism, political instability, sanctions, civil unrest, organized crime, regional escalation, and infrastructure disruption, translating developments into actionable business risk assessments. • Produce strategic, operational, and tactical intelligence products including forecasts, executive briefings, travel risk assessments, crisis updates, heat maps, geospatial overlays, dashboards, and early warning alerts. • Help build, integrate, and maintain intelligence collection pipelines using open-source intelligence, commercial intelligence feeds, geospatial data, proprietary sources, and third-party intelligence platforms. • Continually improve intelligence workflows, alerting mechanisms, and analytical tooling. • Partner cross-functionally with Global Security, Legal, Supply Chain, Strategy, Infrastructure, and business teams to operationalize intelligence and support risk-informed decision making. • Conduct post-incident analysis and lessons-learned reviews following geopolitical events, operational disruptions, or security incidents. • Contribute to best practices, technical standards, and scalable processes for geopolitical and operational threat intelligence. • Support relationships with external intelligence vendors, industry peers, academic institutions, and government or law enforcement partners, where appropriate. • Share domain knowledge, and contribute to continuous improvement of the team.