Threat Researcher

GreyNoise Intelligence

Threat Researcher hunting malicious cyber activity for GreyNoise Intelligence, a startup providing real-time Internet threat intelligence. Producing actionable intelligence to help customers detect and disrupt adversaries.

Posted 8/20/2026full-timeRemote • 🇺🇸 United StatesMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cyber threat intelligence production, including the ability to analyze and disrupt malicious cyber activities. Proficient in network traffic analysis, offensive tooling, and the application of analytical tradecraft to deliver actionable intelligence.

Highest-signal resume keywords

Cyber Threat Intelligence ProductionNetwork Traffic AnalysisOffensive Tooling and TradecraftDetection Rule DevelopmentGraph-Based Analysis Tools

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Computer Networking FundamentalsNetwork Traffic HuntingOffensive ToolingDetection Rules TuningBinary AnalysisReverse EngineeringSQL Query LanguageCyber Threat Intelligence FrameworksAI Prompt EngineeringGraph-Based Analysis

Tools & Technologies

SuricataYARASynapse

Industry Keywords

CybersecurityMalicious Cyber ActivityThreat HuntingIntelligence CommunityEmbedded Systems

Tech Stack

Tools & technologies

SQL

About the role

Key responsibilities & impact

Develop and exploit first-, second-, and third-party access and sources to produce cyber threat intelligence
Conduct hypothesis- and lead-driven hunting through first-party data and telemetry
Identify, analyze, and expose new and novel malicious cyber activity and campaigns
Cluster, track, attribute, research, and disrupt malicious cyber threats
Develop and integrate intelligence information, data sources, tools, systems, and tradecraft
Produce a comprehensive threat picture
Produce and disseminate actionable intelligence to customers and the public

Requirements

What you’ll need

Deep understanding of computer networking fundamentals and protocols
Deep technical ability to hunt through network traffic (full PCAP) at the macro and packet level
Deep technical skills with offensive tooling, tradecraft, and exploitation methodologies against network edge devices
Experience in open and commercial source intelligence research
Experience with hardware and embedded systems
Experience with query languages such as SQL
Experience producing and tuning detection rules such as Suricata and YARA
Experience with binary analysis and reverse engineering
Experience with cyber threat intelligence frameworks and analytical tradecraft
Experience tracking and analyzing threats using graph-based analysis tools such as Synapse
Experience using AI, including prompt engineering and harness engineering
Experience presenting at relevant security and intelligence community conferences
Applicants must have US work authorization

Benefits

Comp & perks

Equity in a high-growth, Series-A startup
100% covered health, dental, vision, and life plans for all employees
Competitive 401k employer match of 6%, 100% matched and vested from day 1
Flexible paid time off; GreyNoise strongly recommends at least 120 hours of PTO (3 weeks) annually, including at least five consecutive business days
Remote-first culture
Apple Mac laptop and $500 equipment accessories stipend
4 months of paid family leave for birth or adoption
2 months of optional unpaid family leave
Annual $1,500 learning and development budget for professional development, tuition, books, conferences, and more
Company offsites and monthly local hangouts