Head of Threat Research

<div class="content-intro"><p></p> <p><strong>About Netcraft</strong></p> <p>Netcraft is the global leader in cybercrime detection and disruption. We’re a trusted partner for three of the four largest companies in the world and many large governments. We've blocked almost 200 million cyber-attacks to date, and we take down around 33% of the world's phishing attacks.</p> <p>Our purpose and passion are focused on just one thing: protecting the world from cybercrime.</p> <p>That passion shapes how we work, too. We’re proud of our talented team and the value each person brings, and we’ve built a workplace where people feel supported and inspired. From strong benefits and wellness programs to meaningful collaboration and team connection.&nbsp;</p> <p></p></div><h3 data-section-id="zmeluu" data-start="0" data-end="18">About the Role</h3> <p data-start="20" data-end="319">As Head of Threat Research at Netcraft, you will lead the team responsible for publishing research grounded in Netcraft’s unique data sets, including global malicious URL and domain telemetry, and a takedown corpus spanning more than 20 years of phishing, malware, and brand impersonation attacks.</p> <p data-start="321" data-end="624">This is a newly created role within the expanding Product Strategy and Emerging Threats team. You will conduct hands-on research, lead a small team of threat analysts, own the publication pipeline, and help represent Netcraft through conferences, webinars, media engagements, and written publications.</p> <p data-start="626" data-end="762">This is a remote position based in the United States, with occasional travel for conferences, team meetings, and customer engagements.</p> <hr data-start="764" data-end="767"> <h3 data-section-id="1mjqdcw" data-start="769" data-end="794">What the Job Involves</h3> <h4 data-start="796" data-end="841">Content Leadership &amp; Public Presentation</h4> <ul data-start="842" data-end="1292"> <li data-section-id="9e5de0" data-start="842" data-end="964">Set editorial direction and quality standards across whitepapers, customer reports, blog posts, and briefing materials</li> <li data-section-id="1vy31ia" data-start="965" data-end="1062">Speak at industry conferences and webinars, including keynotes, panels, and expert commentary</li> <li data-section-id="cwe55d" data-start="1063" data-end="1172">Present complex findings to security analysts, senior executives, board members, and government officials</li> <li data-section-id="qw2hra" data-start="1173" data-end="1292">Serve as a media spokesperson on Netcraft’s threat research, including interviews and commentary with media outlets</li> </ul> <h4 data-start="1294" data-end="1318">Research &amp; Analysis</h4> <ul data-start="1319" data-end="1965"> <li data-section-id="1787hs0" data-start="1319" data-end="1444">Research phishing, malware, malicious JavaScript, and cybercrime campaigns using Netcraft’s threat intelligence platforms</li> <li data-section-id="iduo79" data-start="1445" data-end="1646">Produce threat assessments ranging from short reactive write-ups on active campaigns to in-depth briefings on threat actors and emerging trends using internal telemetry and open-source intelligence</li> <li data-section-id="qmaogh" data-start="1647" data-end="1757">Track how threat actors exploit current events, emerging technologies, and changes in the threat landscape</li> <li data-section-id="4e0auc" data-start="1758" data-end="1863">Attribute infrastructure and campaigns to named threat actor groups and criminal ecosystems over time</li> <li data-section-id="d3swid" data-start="1864" data-end="1965">Review the team’s research output for quality, accuracy, and technical depth prior to publication</li> </ul> <h4 data-start="1967" data-end="2003">Team Leadership &amp; Collaboration</h4> <ul data-start="2004" data-end="2516"> <li data-section-id="ivvoll" data-start="2004" data-end="2052">Mentor and develop a team of threat analysts</li> <li data-section-id="1xsz1nu" data-start="2053" data-end="2205">Partner with engineering and operations teams to turn research findings into detection rules, IOC feeds, takedown signals, and platform improvements</li> <li data-section-id="6s8qky" data-start="2206" data-end="2380">Support complex customer engagements by mapping threats to frameworks such as MITRE ATT&amp;CK, the Diamond Model, and the Cyber Kill Chain, while briefing customers directly</li> <li data-section-id="117707v" data-start="2381" data-end="2516">Brief product, marketing, and sales teams on research findings to support roadmap planning, positioning, and customer conversations</li> </ul> <hr data-start="2518" data-end="2521"> <h3 data-section-id="1rarndv" data-start="2523" data-end="2538">Who You Are</h3> <h4 data-start="2540" data-end="2573">Required Skills &amp; Experience</h4> <ul data-start="2574" data-end="3281"> <li data-section-id="1ycfdxc" data-start="2574" data-end="2686">Published research in threat intelligence or cybersecurity (blog posts, whitepapers, conference talks, etc.)</li> <li data-section-id="mhmqtl" data-start="2687" data-end="2797">Experience presenting original research to audiences ranging from technical analysts to C-suite executives</li> <li data-section-id="sc40uo" data-start="2798" data-end="2898">Several years of threat intelligence experience, including experience leading or managing a team</li> <li data-section-id="17856m3" data-start="2899" data-end="3020">Strong editorial judgment with experience reviewing and improving research writing for clarity, quality, and accuracy</li> <li data-section-id="ykgszp" data-start="3021" data-end="3086">Experience managing or contributing to a publication pipeline</li> <li data-section-id="ehuoz2" data-start="3087" data-end="3187">Deep understanding of phishing, malware, online fraud, social engineering, and threat actor TTPs</li> <li data-section-id="frnr26" data-start="3188" data-end="3281">Current working knowledge of web technologies, internet infrastructure, and data analysis</li> </ul> <h4 data-start="3283" data-end="3313">You’ll Thrive Here If You</h4> <ul data-start="3314" data-end="3636"> <li data-section-id="11ihvln" data-start="3314" data-end="3389">Enjoy balancing hands-on research, team leadership, and public speaking</li> <li data-section-id="13bi7gh" data-start="3390" data-end="3490">Can communicate complex technical concepts clearly to both technical and non-technical audiences</li> <li data-section-id="jr9u1p" data-start="3491" data-end="3636">Prefer working with first-party intelligence and care about translating research into meaningful disruption, detection, and takedown outcomes</li> </ul> <hr data-start="3638" data-end="3641"> <h3 data-section-id="1ipzbhd" data-start="3643" data-end="3666">The Rewards Package</h3> <ul data-start="3667" data-end="4496" data-is-last-node="" data-is-only-node=""> <li data-section-id="nf5lg5" data-start="3667" data-end="3751">33 days vacation, including national holidays (which can be worked if preferred)</li> <li data-section-id="1k6ou0q" data-start="3752" data-end="3794">Generous enhanced family leave and pay</li> <li data-section-id="10fn01j" data-start="3795" data-end="3850">Enhanced sick pay increasing with length of service</li> <li data-section-id="s0dfca" data-start="3851" data-end="3959">Equity Tracking Units allowing you to share in Netcraft’s long-term success (eligibility criteria apply)</li> <li data-section-id="11h4c23" data-start="3960" data-end="3999">Hybrid and flexible working options</li> <li data-section-id="ubaeb9" data-start="4000" data-end="4047">401(k) Safe Harbor Plan with employer match</li> <li data-section-id="1no54ek" data-start="4048" data-end="4144">Comprehensive private health coverage, including medical, dental, vision, and life insurance</li> <li data-section-id="ybkc5u" data-start="4145" data-end="4197">Meals, snacks, and drinks provided in the office</li> <li data-section-id="1p5rwpl" data-start="4198" data-end="4308">Two paid Learning &amp; Development days per year plus access to learning platforms such as Udemy and Coursera</li> <li data-section-id="s6etlz" data-start="4309" data-end="4396">Two paid Volunteering Days per year to support community and charitable involvement</li> <li data-section-id="sue4ox" data-start="4397" data-end="4463">Spot reward bonus scheme recognizing outstanding contributions</li> <li data-section-id="vfo8ub" data-start="4464" data-end="4496" data-is-last-node="">Employee Referral Bonus scheme</li> </ul><div class="content-conclusion"><p></p> <p><strong>Diversity, Equity &amp; Inclusion&nbsp;</strong></p> <p>This is deeply important to us. Through our ally network, we support under-represented groups and&nbsp;maintain&nbsp;a working environment free from bias, harassment, or discrimination. We encourage candidates from all backgrounds to apply.&nbsp;</p> <p>We’re also happy to make adjustments to the hiring process to ensure every candidate can participate fully.&nbsp;</p> <p><strong>Please note:</strong> Netcraft does not accept unsolicited approaches from external recruiters.&nbsp;</p> <p></p></div>