SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
GreyNoise Intelligence is a mission-driven security startup that helps organizations understand and mitigate risks from Internet scanning and exploitation. The company provides real-time, verifiable threat intelligence generated from a global fleet of thousands of purpose-built sensors observing the Internet, using advanced data science and AI to process millions of events into actionable intelligence.
As a Threat Researcher, you will develop and exploit first, second, and third-party access and sources to produce cyber threat intelligence that security practitioners use to detect, disrupt, and impose cost on adversaries.
Key responsibilities include:
- Conduct hypothesis and lead-driven hunting through first-party data and telemetry to identify, analyze, and expose new and novel malicious cyber activity and campaigns
- Cluster, track, attribute, research, and disrupt malicious cyber threats
- Develop and integrate new intelligence information, data sources, tools, systems, and tradecraft to produce comprehensive threat pictures
- Produce and disseminate actionable intelligence to customers and the public
Required expertise includes deep understanding of computer networking fundamentals and protocols, technical ability to hunt through network traffic at macro and packet levels, and deep technical skills with offensive tooling and exploitation methodologies. You should have experience with binary analysis, reverse engineering, detection rule tuning (Suricata, YARA), cyber threat intelligence frameworks, graph-based analysis tools (e.g., Synapse), and AI applications. Additional valuable experience includes hardware/embedded systems analysis, open and commercial source intelligence research, and presenting at security conferences.
This is a fully remote position within the US with optional office attendance at the DC area headquarters. Requires US work authorization.
