Principal Dark Web Collection Analyst

Recorded Future

Principal analyst guiding dark web collection for Recorded Future, the cyber threat intelligence company. Building underground-source access, personas, intelligence products, and automated collection strategies.

Posted 8/4/2026full-timeRemote • Massachusetts • 🇺🇸 United StatesLead💰 $152,000 - $228,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in dark web threat research, including collection strategies and operational compliance, while effectively communicating findings to diverse audiences. Proficient in analyzing criminal forums and darknet markets, with a strong emphasis on legal and policy boundaries.

Highest-signal resume keywords

Dark Web Threat ResearchCollection Strategy DevelopmentAnalytical Writing SkillsProfessional Working Proficiency in RussianBasic Python Scripting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Dark Web Threat ResearchCollection Strategy DevelopmentAnalytical WritingData ParsingFormat Conversion

Soft Skills

Customer PresentationWebinar HostingPublic-Facing Content Writing

Industry Keywords

Criminal ForumsDarknet MarketsThreat Actor TrackingCybercrime ResearchLaw Enforcement Intelligence

Tech Stack

Tools & technologies

Python

About the role

Key responsibilities & impact

Serve as the company-wide subject matter expert on dark web and underground community dynamics, advising product, engineering, sales, and analyst teams
Own strategic collection decisions about forums, markets, channels, intelligence priorities, and resource allocation
Identify, evaluate, and gain access to criminal forums, darknet marketplaces, Telegram channels, and covert infrastructure within legal and policy boundaries
Develop and maintain collection strategies, personas, and source documentation
Partner with engineering to translate research tradecraft into automated collection pipelines
Monitor sources for takedowns, migrations, rebrands, and other operational changes
Produce finished intelligence on threat actors, community dynamics, and emerging underground infrastructure
Collaborate with product, PMM, sales, customer success, and research teams
Represent Recorded Future through customer-facing blogs, webinars, and public research on dark web tactics and trends

Requirements

What you’ll need

5+ years of hands-on dark web threat research with demonstrable collection outcomes
Deep, current expertise in major criminal forums and darknet markets
Proven ability to operate in closed or invite-only communities while maintaining OPSEC and legal compliance
Professional working proficiency in Russian; essential for the role
Strong analytical writing skills for technical and executive audiences
Comfort presenting to customers, hosting webinars, and writing public-facing content
Additional language skills in Ukrainian, Romanian, Chinese, Portuguese, or Arabic preferred
Background in cybercrime research, threat actor tracking, or law enforcement intelligence preferred
Prior experience at a threat intelligence vendor, CSIRT, law enforcement, or intelligence agency preferred
Basic Python scripting for data parsing and format conversion preferred

Benefits

Comp & perks

Incentive compensation eligibility
Equity eligibility
Medical insurance
Dental insurance
Vision insurance
Life insurance
401(k)
Equal opportunity and affirmative action workplace
Accommodation or special assistance during application process