← All roles

Principal Dark Web Collection Analyst

Recorded Future· Engineering: Cyber Operations
Apply on company site
Remote$152k - $228.5kfull-timePosted 2mo ago

About the role

Senior intelligence professional leading Recorded Future’s dark web collection capability, combining strategic governance with hands-on operational work to build access, develop collection strategies, and produce actionable intelligence on underground communities.

Responsibilities

  • Serve as the company-wide subject matter expert on dark web and underground community dynamics, advising product, engineering, sales, and analyst teams
  • Make and own strategic collection decisions: which forums, markets, and channels to pursue; which intelligence areas to prioritize; and where to explicitly not invest resources
  • Identify, evaluate, and gain access to criminal forums, darknet marketplaces, Telegram channels, and adjacent covert infrastructure within legal and policy boundaries
  • Develop and maintain collection strategies, personas, and source documentation to sustain access across a volatile source landscape
  • Partner with engineering to translate research tradecraft into automated collection pipelines
  • Monitor sources for operational changes — takedowns, migrations, rebrands — and continuously adapt
  • Produce finished intelligence on key threat actors, community dynamics, and emerging underground infrastructure: actor profiles, source assessments, and analytical summaries
  • Collaborate broadly across internal teams — product, PMM, sales, customer success, and research — as the go-to voice on underground community intelligence
  • Represent Recorded Future externally: writing customer-facing blogs, presenting at webinars, and contributing to public research on dark web tactics and trends

Qualifications

  • 5+ years of hands-on dark web threat research with demonstrable collection outcomes across forums, marketplaces, or covert channels
  • Deep, current expertise in the structure and dynamics of major criminal forums and darknet markets — how they operate, how access is governed, and how actors and communities evolve
  • Proven ability to operate within closed or invite-only communities while maintaining OPSEC and legal compliance
  • Russian language proficiency at a professional working level — essential for this role
  • Strong analytical writing skills — ability to produce concise, well-sourced intelligence products for both technical and executive audiences
  • Comfort operating externally: presenting to customers, hosting webinars, and writing public-facing content with authority

Skills

Required:Dark web threat researchOPSEC and legal complianceAnalytical writingPublic speaking / customer-facing communicationRussian language proficiency
Nice to have:Scripting (Python)

Benefits

  • Incentive compensation (where applicable)
  • Equity (where applicable)
  • Medical, dental, vision, life insurance
  • 401K
Last updated Aug 5, 2026. Interested? Apply on the company site.

About Recorded Future

The future of cyber defense is autonomous.

Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your business.

cyber threat intelligencesecuritythreat detectionAIresearch
Company profileWebsite

More open roles at Recorded Future