Cyber Security & Threat Intelligence Researcher

Cyber Security & Threat Intelligence Researcher

The connected threat landscape is evolving faster than any single organization can track. Intruxion X is on the front lines. Work alongside an elite team to investigate nation-state campaigns, identify emerging IoT attack vectors, and turn raw intelligence into the detection engines that protect hospitals, power grids, and military systems.

IoT / OT Threat Actor Analysis Intelligence Production & Reporting Adversary Emulation & Red Team Detection Engineering

Why this role matters

QICX and ABACUS need a constant feed of high-fidelity threat intelligence to remain ahead of adversaries. That intelligence comes from researchers like you. Your findings won't sit in a PDF on a shelf — they'll be operationalized into detection signatures, red-team scenarios, and platform capabilities that protect critical infrastructure at scale.

Team & mission context

You'll work inside the Research division alongside AI researchers, hardware security engineers, and product teams. Your threat models will directly shape QICX detection logic and ABACUS analytics. You'll also contribute to published research, briefings, and intelligence reports distributed to partners and government stakeholders.

What you'll own

01 Investigate emerging APT campaigns, zero-day vulnerabilities, and IoT/OT-specific attack vectors

02 Translate raw threat data into high-fidelity intelligence reports for both technical and executive audiences

03 Develop red-team scenarios and threat models simulating real-world attacker techniques

04 Contribute to QICX detection signature development and ABACUS analytics pipeline

05 Monitor dark web, underground forums, and OSINT channels for emerging indicators of compromise

What we're looking for

Deep knowledge of adversary TTPs, MITRE ATT&CK, and threat intelligence frameworks (3+ years)

Hands-on experience with network forensics, packet analysis, and malware reverse engineering

Proficiency with OSINT tooling, dark web monitoring, and structured intelligence production

Strong written communication — you can make complex threats readable for non-technical stakeholders

NICE TO HAVE

Experience with IoT/OT-specific threat actors or industrial control system intrusions

Familiarity with ICS protocols: MODBUS, DNP3, BACnet, or Zigbee

Security certifications: GREM, GCTI, GCFE, or equivalent

Published research or conference presentations (DEF CON, Black Hat, S4, etc.)

You'll thrive here if…

You find zero-days more interesting than CVE scores

You read threat actor reports the way other people read news — compulsively, critically, with your own annotations

You are as comfortable writing a technical forensics report as you are reversing malware

You want your research to have operational impact, not just academic recognition

You think in adversary TTPs first, tools second