Corvus Insurance is hiring a
Threat Intel Researcher

Summary

The job is for a Threat Intel Researcher at Corvus Insurance who will monitor the threat landscape, prepare alerts on emerging vulnerabilities, support research projects, and work with internal teams to improve threat intelligence capabilities. The role is currently remote but will transition to a hybrid schedule in June 2025.

Requirements

• 2 - 3 years experience conducting threat intel research, supporting/performing incident response, red teaming, threat hunting, or similar related experience
• Experience navigating TOR, Telegram, and dark web forums. An established dark web persona preferred
• 2+ years of scripting/programming experience (e.g., Python, Ruby, Rust, etc.)
• Experience with vulnerability assessment and analysis
• 1 year experience with SQL or other query languages, e.g., SQL, SparkQL, GraphQL
• Experience with OSINT tools like Shodan, Censys, Wappalyzer, ZoomEye
• Knowledge and passion for tracking current security trends, threats, and mitigations
• Familiarity with nation-state, financially motivated, and hacktivist threat actors
• Excellent written and oral communication skills with the ability to write/present to less technical audiences
• Demonstrated sense of ownership, urgency, and accountability

Responsibilities

• Monitor the threat landscape for emerging threats, including new vulnerabilities, attack techniques, and trends
• Work with OSINT tools like Shodan, Censys, and large data sets to fingerprint vulnerable systems
• Prepare written alerts to Corvus policyholders on emerging vulnerabilities with an emphasis on mitigation techniques
• Support threat intel research projects through detailed research and tool development
• Work with other internal teams to support data enrichment and risk detection capabilities
• Support the internal security team with internal initiatives and investigative support where needed