Dark Web Intelligence Analyst

About the Role
We are looking for a Dark Web Intelligence Analyst to monitor, investigate and report on threats emerging from underground ecosystems.
You will track threat actors, ransomware groups, initial access brokers and data leaks across Dark Web forums, marketplaces and closed channels, turning raw underground data into actionable intelligence for our clients and internal teams.
Responsibilities
Monitor Dark Web and Deep Web forums, marketplaces, leak sites and Telegram/closed channels
Track ransomware groups, initial access brokers, data brokers and fraud communities
Detect and verify data leaks, credential dumps and access sales related to clients
Profile threat actors: aliases, reputation, activity history and cross-platform links
Map actor TTPs to MITRE ATT&CK and correlate findings with IOCs and other intelligence sources
Produce timely alerts and in-depth intelligence reports
Maintain secure research infrastructure and personas following strict OPSEC
Contribute to collection methods, tooling and internal training
What We’re Looking For
2–4 years of experience in Dark Web research, CTI, OSINT or a related field
Deep understanding of the cybercrime ecosystem and underground economy
Hands-on experience navigating Tor, I2P and underground forums safely
Strong OPSEC discipline and experience managing research personas
Ability to verify claims, assess source credibility and avoid false positives
Familiarity with threat intelligence platforms (e.g. MISP, OpenCTI)
Clear, structured report writing skills
Good command of English; Russian is a strong plus
Nice to Have
Python skills for scraping, monitoring and automation
Experience with cryptocurrency tracing and blockchain analysis
Knowledge of ransomware operations, leak site dynamics and negotiation patterns
Relevant certifications (e.g. GCTI, CTIA)
Published research, investigations or a CTI portfolio
What We Offer
Work on real-world underground investigations and live cases
Ongoing technical training and practical workshops
Opportunity to shape our Dark Web collection capability
Competitive salary

Work arrangement
Yes