Lead Vulnerability Intelligence Analyst (Europe or LATAM, Remote)
Level inferred from job title
Job description
A team lead role owning the technical depth of Intel 471's vulnerability intelligence practice, determining the validity of CVE exploitation claims and advising customers on response. The role sets the technical standard for validating, assessing, and communicating vulnerability risk and builds tooling to support a small research team.
At a glance
- Work mode
- Remote
What you'll do
- Design, build, and deploy honeypot systems to monitor for exploitation activity
- Acquire, test, and validate proof-of-concept exploits in virtual environments to confirm or refute claims about exploitability
- Develop practical mitigations for cases where patching is delayed, impossible, or insufficient, including configuration hardening, network segmentation, ACLs, disabling features, or other controls
- Devise techniques for detecting both attempted and successful exploitation by illuminating the artifacts defenders should hunt for
- Write vulnerability reports that dive into the details about an exploit such as how it works, who is using it and who is being targeted
- Build and maintain the systems used to streamline vulnerability assessment and automate triage of vulnerability alerts
- Train and mentor junior team members
What we're looking for
- Validate and test PoCs to verify the validity of exploitation claims
- Devise mitigation techniques beyond patching
- Devise techniques for detecting exploit activity, attempted or successful
- Write vulnerability reports such as Vulnerability Spotlights
- Identify new sources of vulnerability intelligence
- Proficiency with at least one programming language (Python, Go, C/C++, or similar) sufficient to read exploit code, modify PoCs, and build tooling
- Hands-on fluency with virtual machines, containers, and re-usable lab environments for safe detonation and analysis
- Solid computer science fundamentals
- Thorough understanding of computing and internet fundamentals: TCP/IP, HTTP, DNS, TLS, authentication and authorization models, and how real systems are actually deployed
- Demonstrated subject-matter-expert-level depth
- A working bias toward automation
Nice to have
- Experience building honeypot or sensor systems to monitor real-world exploitation activity
- Experience building systems that streamline or automate PoC testing and validation
- Demonstrated ability to integrate a new intelligence source end-to-end, from evaluation and ingestion to normalization, enrichment and delivery
- Original vulnerability research or CVE credits
- Reverse engineering skills
- Detection engineering (Sigma, Snort/Suricata, YARA)
- SOC experience
- Familiarity with CVSS, CWE, EPSS, and the KEV catalog
- Public speaking or published writing
Your team
vulnerability intelligence practice
Benefits
- Competitive compensation
- Remote-friendly culture
- Wellness programs
- A variety of professional development opportunities
- Inclusive culture focused on people, customers and innovation
Apply
About Intel 471
Founded in 2014, Intel 471 provides comprehensive intelligence and monitoring on threat actors. The company's centralized TITAN platform enables intelligence and security professionals to access structured information, dashboards, timely alerts and intelligence reporting via web portal or API integration.
Mission
Empowers enterprises, government agencies, and other organizations to win the cybersecurity war using near-real-time insights into the latest malicious actors, relationships, threat patterns, and imminent attacks relevant to their businesses
Key facts
- 2014
- cybersecurity
- Founded in 2014
- Centralized TITAN platform enables intelligence and security professionals to access structured information, dashboards, timely alerts and intelligence reporting via web portal or API integration
- Team with experience operating in the intelligence services, military, law enforcement and private threat intelligence companies in nearly every continent on earth
What they value
- Openness
- Inclusion
- Integrity
- Client focus