Lead Vulnerability Intelligence Analyst

About the Position

We are seeking a Lead Vulnerability Intelligence Analyst to join our team at Intel 471. This is a remote position where you will own the technical depth of our vulnerability intelligence practice. When a new CVE drops, you'll be the person who determines what's actually true and decides what our customers should do about it.

Responsibilities

• Design, build, and deploy honeypot systems to monitor for exploitation activity.
• Acquire, test, and validate proof-of-concept exploits in virtual environments to confirm or refute claims about exploitability.
• Develop practical mitigations for cases where patching is delayed, impossible, or insufficient.
• Devise techniques for detecting both attempted and successful exploitation.
• Write vulnerability reports that dive into the details about an exploit.
• Build and maintain the systems used to streamline vulnerability assessment and automate triage of vulnerability alerts.

Requirements

• Validate and test PoCs to verify the validity of exploitation claims.
• Devise mitigation techniques beyond patching.
• Devise techniques for detecting exploit activity, attempted or successful.
• Write vulnerability reports such as Vulnerability Spotlights.
• Identify new sources of vulnerability intelligence.
• Train and mentor junior team members.
• Proficiency with at least one programming language (Python, Go, C/C++, or similar).
• Hands-on fluency with virtual machines, containers, and reusable lab environments.
• Solid computer science fundamentals.
• Thorough understanding of computing and internet fundamentals.

Nice to Have

• Experience building honeypot or sensor systems to monitor real-world exploitation activity.
• Experience building systems that streamline or automate PoC testing and validation.
• Demonstrated ability to integrate a new intelligence source end-to-end.
• Original vulnerability research or CVE credits.
• Reverse engineering skills.
• Detection engineering (Sigma, Snort/Suricata, YARA).
• SOC experience.
• Familiarity with CVSS, CWE, EPSS, and the KEV catalog.
• Public speaking or published writing.

We Offer

• Competitive compensation
• Remote-friendly culture
• Wellness programs
• A variety of professional development opportunities
• Inclusive culture focused on people, customers, and innovation

About the Company

Intel 471 empowers enterprises, government agencies, and other organizations to win the cybersecurity war using near-real-time insights into the latest malicious actors, relationships, threat patterns, and imminent attacks relevant to their businesses. Founded in 2014, Intel 471 provides comprehensive intelligence and monitoring on threat actors. The company’s centralized TITAN platform enables intelligence and security professionals to access structured information, dashboards, timely alerts, and intelligence reporting via web portal or API integration.

Our pedigree is unmatched and we count upon a team with experience operating in the intelligence services, military, law enforcement, and private threat intelligence companies in nearly every continent on earth.

The Intel 471 team is constantly growing and is always on the lookout for talented professionals who seek to operate on the forefront of the fight against threat actors impacting our customers and partners. Our culture of humility and quiet professionalism is a core attribute of Intel 471 and everyone within it. Our culture is collaborative, supportive, and fast-paced. We're a mission-driven company. We're looking for talented, 'can-do' minded people with a passion for always doing the right thing.

We believe in supporting a progressive culture that allows all our people to be themselves, enjoy exciting opportunities, and grow with us. That's why our culture is founded on our core values of openness, inclusion, integrity, and client focus, which set the tone for how we work together and treat each other in order to empower us all – and foster a unique team spirit.