Principal Targeting Analyst-TS Required

Position Overview

SIXGEN is seeking a Principal Targeting Analyst to build and lead an organic targeting and collection capability that strengthens offensive cyber, red-team, and adversary-emulation missions.

Key Responsibilities

• Conduct end-to-end target development against threat actors and adversary infrastructure — from initial requirement through finished, decision-ready intelligence.

• Direct collection across the surface, deep, and dark web, closed forums, encrypted messaging platforms, and regional ecosystems beyond commercial data sources.

• Perform authorized threat-actor engagement and elicitation; track initial-access brokers, exploit sellers, and access markets relevant to mission objectives.

• Deliver timely targeting updates and access intelligence in support of red-team and operational engagements; author finished intelligence and brief senior stakeholders and customers.

Persona Lifecycle & Attribution-Resistant Infrastructure

• Establish and govern durable, non-attributable personas spanning multiple regions — programmatic creation, automated aging and backstopping, sustainment, and OPSEC-safe access control.

• Design and maintain managed-attribution infrastructure: VPS estates, egress and redirector architectures, fingerprint control, and compartmented access paths.

• Manage OPSEC-compliant procurement and resourcing practices that support persona creation, infrastructure acquisition, and operational sustainment in a controlled, auditable manner.

• Author and enforce the governing SOPs and defensive operating standards that keep the capability secure and compliant.

AI Engineering, Software Development & Automation

• Design and deploy agentic AI workflows and Model Context Protocol (MCP) servers that automate discovery, monitoring, collection, and enrichment across the capability.

• Apply LLMs and multimodal models to real-time translation, entity extraction, data labeling, and semantic summarization of text, image, and video at scale — with evaluation harnesses that keep automated output accurate and auditable.

• Build production-grade collection tooling, scrapers, and API integrations in Python, JavaScript/TypeScript, and Bash; architect ingestion pipelines that move raw collection into structured, queryable platforms.

• Stand up cloud and serverless infrastructure (AWS or equivalent) and analyst-facing applications that reduce triage time and operational friction.

• Evaluate and unify commercial data sources for baseline collection while prototyping core tooling in-house, focusing engineering effort on hardening validated, high-value capabilities.

Language, Regional Exploitation & Leadership

• Apply professional foreign-language proficiency to collect, exploit, and contextualize target-language material that machine translation alone cannot resolve, and operate personas credibly within target-language environments.

• Help architect, lead, and scale the capability over time — from initial standup through automation to a durable, standalone targeting function.

• Onboard, mentor, and develop analysts; serve as technical lead and primary briefer for cross-team and customer-facing engagements.