Threat Actor Engagement & Intelligence Consultant - Remote (Anywhere in the U.S.)

The role

This person will conduct threat actor communications and ransomware negotiations for clients. They will also support intelligence research efforts by operationalizing threat intelligence data.

What you will do

• Lead and conduct Threat Actor Communications engagements.
• Advise clients, legal counsel, and insurance carriers on ransomware and data extortion risks.
• Operate as a technical resource and participate in DFIR investigations.
• Foster client relationships through support, information, and guidance.
• Author comprehensive engagement deliverables for technical and managerial audiences.
• Utilize automation, orchestration, and scripting to improve efficiency.
• Contribute to integration of open-source and commercial tools.
• Strengthen relevant skills to stay at the forefront of the industry.

Required qualifications

• 2 - 4 years prior experience in communicating with threat actors, such as through virtual persona operations, ransomware negotiations, or use of “sock puppet” accounts in Deep and Dark Web collection.
• Two (2+) years of experience performing Threat Intelligence analysis and/or collection
• Prior experience in intelligence sharing relationships and partnerships within the private sector, ISACs, government, and/or private intelligence sharing groups.
• Prior experience in building and developing persona operations, including familiarity with dark web forums and marketplaces, adversary behavior, and trust mechanisms.
• Familiarity with digital forensics and incident response workflows, processes, and deliverables.
• Experience in client-facing, professional services, or consulting roles.
• Experience using emerging technologies, including AI tools.
• Sedentary work.
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day.
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day.

Nice to have

• Familiarity with cryptocurrency tracing and blockchain technology.
• Experience implementing or improving operational processes or procedures in the intelligence lifecycle.
• Proficiency hunting APT data using open source or commercial cyber threat analytic tools or data repositories such as VirusTotal, Passive Total, Threat Miner, or Maltego.
• Experience in scoping and conducting threat research centered on cybercrime, ransomware, and/or nation-state cyber operation.

Benefits

• Group Medical Insurance options: Zero Deductible PPO Plan or High Deductible Health Plan with HSA
• Group Dental Insurance
• 12 corporate holidays
• Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at open enrollment
• Pet Benefit Option

About the company

GuidePoint Security is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information Security. The GuidePoint Research and Intelligence Team (GRIT) provides managed Threat Intelligence and Exposure Management services.