Investigative Researcher, Cyber Threat Intelligence

As the Investigative Researcher you will conduct desktop and online investigative research into cyber and online threats, to enrich our Cyber Threat Intelligence (CTI) reporting and support bespoke investigations. This role will primarily involve conducting threat actor and incident-focused research, contributing regular reporting for Control Risks’ Cyber Incident Response team, producing context for the Seerist platform and supporting ad-hoc investigative projects. Please note that this role requires you to work from our London (Bank/Monument) office at least three days per week on a hybrid basis.

Key Responsibilities

Research and information gathering

• Conduct regular profiling of cyber threat actors to support on-going incidents and investigations.
• Demonstrate strong investigation skills relating to specific cyber threat incidents, data breaches and other cyber security incidents.
• Research new sources of information and develop capabilities to collect and analyse information in support of the team.
• Build knowledge of collection tools to support bespoke investigative projects and Cyber Incident Response engagements.
• Contribute continuous research for inclusion in routine CTI reporting and bespoke threat assessments.
  Develop knowledge of principal cyber and online threat actors through research on open source, social media, deep and dark web sites and Control Risks internal intelligence systems.
• Support our clients with regular monitoring of our deep and dark web sources. Please note that this role includes some flexible weekend monitoring.
  

General analytical responsibilities

• Support analysis on bespoke projects through data collection across all CTI products, demonstrating an ability to make judgments on the value of research collected.
• Be technically aware and understand basic cyber security principles e.g. MITRE ATT&CK, the unified kill chain, the intelligence life cycle.
• Be alert to the political implications of developments among cyber threat groups and bring these to the attention of other service lines.
• Contribute analysis for subscription updates.
  

Marketing and business development

• Support business development through initial research scoping for proposals and other business development and marketing exercises.