Hybrid Junior Cybersecurity Intel Researcher

at Anomali

• Job title: Junior Cybersecurity Intel Researcher
• Job type: Full Time
• Experience level: Junior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, Python
• Location requirements: Hybrid, Belfast, United Kingdom

About the role

• Researcher assisting the Cyber Threat Intelligence team at Anomali. Conducting OSINT research, sample analysis, and developing automation workflows.

Responsibilities

• Conducting false positive/negative triage within ThreatStream, ensuring accurate classification and minimal intelligence misattribution.
• Assist with sample collection and analysis, including handling malware samples, suspicious files, and malicious infrastructure.
• Develop and refine custom scripts and automation workflows to improve threat analysis and intelligence ingestion.
• Work with wider teams to research, structure, and publish the semi-annual State of OSINT Report.
• Contribute to threat detection improvements, including refining behavioral indicators and intelligence structuring.
• Develop behavioral detections with the Anomali Query Language (AQL)

Requirements

• BSc/BEng in Computer Science, Cybersecurity or, an additional 3 years of relevant experience in lieu of degree
• Basic knowledge of malware analysis techniques, including dynamic/static analysis, sandboxing, and unpacking.
• Experience with triaging False Positives and False Negatives, ensuring accurate threat classifications.
• Familiarity with scripting languages (e.g., Python, Bash, or PowerShell) to automate malware analysis and intelligence workflows.
• Understanding of OPSEC principles and secure research practices, particularly in handling malware execution.
• This position is not eligible for employment visa sponsorship. The successful candidate must not now, or in the future require visa sponsorship to work at our Belfast location.
• Experience with reverse engineering tools such as IDA Pro, Ghidra, or Radare2.
• Hands-on experience using sandbox environments (e.g., Cuckoo, Any.Run, VMRay, or Joe Sandbox) for malware behavior analysis.
• Basic understanding of network security concepts, including traffic analysis, PCAP inspection, and C2 detection.
• Prior experience with Threat Intelligence Platforms (TIPs) such as ThreatStream, MISP, or OpenCTI.
• Web scraping and automation experience, preferably using Python, to collect and structure intelligence data.

Benefits

• Private Healthcare Plan
• Dental Plan
• Optical Plan
• Paid Public Holidays
• Accrued Paid Time Off – 25 days
• Quarterly event with your Geographic Team