Senior Threat Researcher, East Asia in London

Overview: You will join Cloudflare's threat operations and research team, Cloudforce One, to build a proactive, intelligence-driven approach to protecting Cloudflare and its customers from East Asia-originated threats. The role requires an innovative, OPSEC-savvy, self-starting, and detail-oriented problem solver with a passion for identifying, tracking, and assessing sophisticated cyber threats.

Responsibilities:

• Monitor cyber threat activity, trends, and methodologies across multiple platforms, supporting client requests and proactive internal research.
• Discover and analyze East Asian adversaries, their TTPs, and apply knowledge of geopolitical developments to understand actions and anticipate moves.
• Obtain key threat intelligence information, synthesizing technical and non-technical datasets to derive insights and author timely reporting.
• Lead subject matter for proactive reporting on threat actor TTPs and trends and lead corresponding reporting efforts.
• Support priority intelligence requirements to ensure resources focus on clients' most relevant intelligence needs.
• Collaborate with engineering teams to ensure data and analytics are incorporated in internal platforms to improve and automate intelligence workflows.

Qualifications:

• Excellent OSINT research skills and firsthand experience in Threat Intelligence, with familiarity of advanced persistent threats.
• Strong technical foundation, practical knowledge of intelligence report writing, and the ability to work well in a distributed remote team.
• One of the following: BA/BS or equivalent in Computer Science, Computer Engineering, Information Security, Information Systems, Intelligence, or related discipline; OR military training and experience in Cyber Intelligence or related discipline.
• At least 10 years of experience in one or more of the following domains: intrusion analysis, cyber threat hunting, cyber threat intelligence, incident response, network defense, endpoint forensics, or malware analysis.
• Excellent teamwork and interpersonal skills with ability to collaborate with a globally distributed team; willing to mentor colleagues on intrusion analysis and threat intelligence best practices.

Desirable Skills, Knowledge and Experience:

• Deep understanding of the cyber threat landscape and the intelligence lifecycle.
• Expert knowledge of East Asia state-sponsored APT groups.
• Experience tracking and clustering threat groups using Cyber Kill Chain or Diamond Model.
• Experience with open source intelligence gathering tools.
• Experience analyzing cyber campaigns using structured analytical techniques.
• Understanding of current security trends related to East Asian threat adversaries.
• Proficiency in networking concepts (TCP/IP) and related datasets.
• Strong written and verbal communication and presentation skills, including to CXO level.

Bonus Points:

• MA/MS or equivalent in relevant field.
• Malware analysis and reverse engineering skills.
• Foreign language proficiency in East Asian languages.
• Experience in the intelligence community.
• Familiarity with detection capabilities and practical tracking of malicious activity.
• Working knowledge of SQL.

Compensation & Equity: Compensation may be adjusted depending on work location. This role is eligible to participate in Cloudflare's equity plan.

Benefits: Cloudflare offers a comprehensive benefits package. The below describes benefits for employees in the United States (benefits may vary for employees outside the U.S.).

• Health & Welfare Benefits: Medical/Rx Insurance; Dental Insurance; Vision Insurance; Flexible Spending Accounts; Commuter Spending Accounts; Fertility & Family Forming Benefits; On-demand mental health support and Employee Assistance Program; Global Travel Medical Insurance.
• Financial Benefits: Short and Long Term Disability Insurance; Life & Accident Insurance; 401(k) Retirement Savings Plan; Employee Stock Participation Plan.
• Time Off: Flexible paid time off; Parental, pregnancy health, medical, and bereavement leave.

What makes Cloudflare special: We're not just a highly ambitious, large-scale technology company with a soul. Our mission is to help build a better Internet by protecting the free and open Internet.

• Project Galileo: since 2014, we've equipped journalism and civil society organizations with tools to defend themselves against attacks, at no cost.
• Athenian Project: established to protect election information and voter registration for local governments.
• 1.1.1.1: we released a privacy‐focused public DNS resolver to help fix the foundation of the Internet. We do not store client IP addresses and never sell user data.

Sound like something you’d like to be a part of? We’d love to hear from you!

Export control: This position may require access to information protected under U.S. export control laws, including EAR restrictions. Any offer of employment may be conditioned on authorization to receive software or technology controlled under U.S. export laws without sponsorship.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and value diversity and inclusiveness. All qualified applicants will be considered for employment without regard to race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, disability or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities. If you require accommodations to apply for a job, please contact us at hr@cloudflare.com or 101 Townsend St. San Francisco, CA 94107.