Threat Intelligence Analyst

About the role

As a Threat Intelligence Analyst focused on Dark Web research, you will uncover and analyse threat‑actor activity across hidden forums, marketplaces and encrypted channels. Your insights will help spiderSilk’s clients and product teams stay ahead of emerging cyber threats.

Key responsibilities

• Monitor and investigate activity on dark web forums, marketplaces, encrypted messaging platforms and other covert channels.
• Track threat‑actor behavior, campaigns and emerging tactics, techniques and procedures (TTPs).
• Collect, tag and analyse data such as leaks, malware distribution, initial‑access sales and exploit trades.
• Produce high‑quality intelligence reports, alerts and briefings for technical and executive audiences.
• Collaborate with product, research and exposure teams to enrich findings with external data and client relevance.
• Maintain strong operational security (OPSEC) protocols during intelligence gathering and engagement.

Required profile

• 2–4 years of experience in threat intelligence or cyber investigations, with a focus on dark web monitoring.
• Strong knowledge of dark web platforms such as TOR, I2P and decentralized forums.
• Familiarity with OSINT techniques and operational tooling (e.g., Maltego, Recon‑ng).
• Ability to recognise and interpret threat‑actor behavior, indicators of compromise and relevant geopolitical or industry trends.
• Solid writing and analytical communication skills for tactical alerts and strategic reports.

Required skills

• TOR
• I2P
• Maltego
• Recon‑ng
• OSINT techniques
• GIAC GCTI certification
• CREST CTIM certification