Sr. Threat Researcher

Résumé du poste

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more! As a Sr. Threat Researcher, you will join Fortra’s Managed Threat Intelligence group, a world-class team focused on generating actionable threat intelligence findings for clients of…

Détails du poste

Whether you’re an experienced professional or just getting started, your contributions matter at Fortra. If you’re passionate about tackling meaningful challenges alongside talented team members committed to helping each other succeed, all while having lots of fun, we want to hear from you. We offer competitive benefits and salaries, personal and professional development opportunities, flexibility, and much more! As a Sr. Threat Researcher, you will join Fortra’s Managed Threat Intelligence group, a world-class team focused on generating actionable threat intelligence findings for clients of Fortra Managed Services. With a core focus on building out an intelligence platform, this role helps Fortra clients fully understand the nature of the threats targeting them and provides critical intelligence to help clients most effectively prioritize aspects of their defensive posture. WHAT YOU'LL DO Actively research a variety of cyber threats using technical analysis techniques, data analysis, and both open-source and deep/dark web intelligence gathering. Participate in a peer review process of intelligence deliverables by providing notes and constructive feedback. Analyze threats to identify novel adversary capabilities, tactics, techniques, and procedures. Conduct data analysis to identify notable trends and activity groups in email-delivered, Account Takeover, and Digital Impersonation activity across the cybercrime ecosystem. Monitor previously identified activity groups over time to track activity and evolution in their behavior. Develop infrastructure for Threat Intelligence platform Other duties as assigned. QUALIFICATIONS 8+ years in security operations, or 3-5 years in intelligence analysis or investigative journalism. Strong understanding of social engineering techniques, phishing threats, and digital impersonation tactics. Fluent in reading web-based scripting languages including HTML, PHP, and JavaScript. Strong static and dynamic analysis skills with an emphasis on web applications Exceptionally strong analytical reasoning, problem solving, and decision-making skills. Experience analyzing email-based threats, including familiarity with SMTP and email header analysis. Exceptional research skills using both OSINT and private threat data. Proficiency querying both relational and non-relational databases. Strong experience with creating pattern matching signatures (Regex, YARA) and using querying languages (KQL, SQL). Ability to work independently and effectively as part of a remote team with minimal supervision. Relentless curiosity and desire to self-develop in order to keep up with the evolving threat landscape. Advanced scripting knowledge, and a passion for automating routine or repetitive tasks. Python knowledge required. Proficiency with web-application penetration testing principles. Note: this job is not a pen-testing role. Proficiency analyzing web traffic using Wireshark, developer tools, or other mechanisms. Experience deobfuscating code to facilitate analysis. Able to effectively develop intelligence requirements to an RFI via interaction with stakeholders. Familiarity with GitOps, systems architecture, and Object-Oriented design patterns This position requires proficiency in English to interact, support and/or provide services to non-French speaking customers, employees and/or partners inside and/or outside the province of Quebec. We are an equal opportunity employer and encourage applications from candidates of all backgrounds. We do not require “Canadian work experience”; all relevant experience will be considered. This posting is for a new position. Expected Compensation: C$105,000 - C$135,000 At Fortra, we’re breaking the attack chain. Ready to join us? Visit our website to learn more about why employees choose to work for Fortra. Remember to connect with us on LinkedIn. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, veteran or disability status. Ready to break the attack chain and forge a stronger future? Let’s secure it—together. At Fortra, we’re not just responding to cyber threats but anticipating them, planting obstacles, and breaking the attack chain. Fortra is a global cybersecurity company offering advanced offensive and defensive security solutions that deliver comprehensive protection across the cyber kill chain. Armed with a team of passionate experts driven by a shared purpose, we work together to empower our clients with the tools, intelligence, and expertise to safeguard what matters most.

Ce que vous ferez

The Senior Threat Researcher will actively research cyber threats using technical analysis and intelligence gathering to generate actionable threat intelligence findings for clients. This role involves analyzing threats to identify novel adversary capabilities and developing infrastructure for the Threat Intelligence platform.

Exigences

Candidates need 8+ years in security operations or 3-5 years in intelligence analysis, coupled with strong analytical reasoning and research skills using OSINT and private data. Required technical proficiencies include scripting languages (Python), pattern matching signatures (Regex, YARA), database querying (KQL, SQL), and web application analysis.

Avantages

• Competitive benefits • Personal and professional development opportunities • Flexibility

Compétences indiquées

• Team-focused · Souhaitée
• Français · Souhaitée
• SQL · Souhaitée
• Analytical · Souhaitée
• Technical · Souhaitée
• analysis · Souhaitée
• Analyse de données · Souhaitée
• Decision Making · Souhaitée
• Development · Souhaitée
• Python · Souhaitée
• email · Souhaitée
• Anglais · Souhaitée

Autres compétences pertinentes

Relevées dans la description du poste. Confirmez les exigences importantes ci-dessus.

• Technical Analysis
• Data Analysis
• OSINT
• Deep/Dark Web Intelligence
• Threat Analysis
• Social Engineering
• Phishing Threats
• Digital Impersonation
• HTML
• PHP
• JavaScript
• Static Analysis
• Dynamic Analysis
• SMTP
• Email Header Analysis
• Python