Senior Security Researcher (Phishing)

About the role

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. We provide solutions that thwart cyberattacks and protect more than 4 billion accounts worldwide. Joining SpyCloud means being part of a dynamic team where you can contribute to making the internet safer.

Responsibilities

• Data Collection: Locate, target, and recapture data from Phishing-as-a-Service (PhaaS) kits using a combination of human intelligence and platform sourcing.
• Data Analysis: Apply data science techniques to understand the quality of sourced data, refining and improving the PhaaS data sourcing pipeline.
• Human Intelligence: Perform human intelligence techniques such as managing multiple alternate personas, actor engagements, and social engineering in support of data recapture efforts.
• Security Analysis: Draft research blogs and analytical products to support customers and business objectives.
• Security Research: Participate in security research including investigation of threat actors, PhaaS, and other critical research in support of SpyCloud’s priorities.

Requirements

• 5+ years of experience as a cybersecurity researcher, analyst, or similar cybersecurity-related position.
• Working knowledge of modern PhaaS kits and techniques, including AiTM and Device Code phishing.
• Experience with human intelligence techniques including elicitation, persona management, and direct threat actor engagement.
• Critical thinker comfortable with collaborative problem-solving in a team environment.
• Excellent communication skills.
• Highly curious, empathetic, flexible, and self-directed.
• Experience working in a remote work environment with team members all around the world.
• A passion for thwarting bad actors in the cybercriminal ecosystem.

Nice to Have

• Experience with a high-level programming language like Python, Rust, Go.
• Experience working with large enterprises in delivery of security analytics products.
• Experience in using data science to analyze datasets for the purposes of detecting fraud or cyberthreats.
• Experience with databases (relational or NoSQL).
• Experience automating data collection and analysis with a programming language.
• Experience working with industry peers and sharing information in a secure manner.
• Experience using AI/LLMs to perform data analysis tasks with large datasets.
• Experience scraping data from deep and dark web.

Pay

Base Salary Range: $119,000 – $155,000

Schedule

Full-time