About the role

Role Overview

Join Recorded Future’s Threat Intelligence team as a Fraud Analyst focused on researching cyber threats and fraud-related activity, producing actionable intelligence, and supporting detection opportunities.

What You’ll Do

Conduct research on emerging cyber threats, adversary activity, and global threat trends
Collect, analyze, and synthesize data from technical and open sources to produce actionable intelligence
Track threat actor infrastructure, campaigns, and evolving TTPs (tactics, techniques, and procedures)
Monitor and assess Chinese-language sources to identify relevant threat activity and insights
Produce high-quality intelligence reporting for internal and external stakeholders
Identify and develop indicators and detection opportunities
Collaborate with cross-functional teams, including intelligence, engineering, and data science
Continuously build technical expertise and stay current on evolving threat landscapes and tradecraft

What You’ll Bring

BA/BS or equivalent experience in Computer Science, Information Security, Intelligence, Security Studies, or related field
1–2 years of experience in threat intelligence, cybersecurity, or a related discipline (including internships/academic research)
Foundational understanding of cyber threat analysis and intelligence methodologies
Basic networking knowledge: TCP/IP, DNS, and internet infrastructure
Ability to analyze technical artifacts such as domains, IP addresses, and related metadata
OSINT collection and analysis familiarity
Exposure to CTI tools and workflows (e.g., Jupyter Notebook, Maltego, Elastic Stack or similar)
Knowledge of structured analytic techniques/frameworks such as MITRE ATT&CK, Cyber Kill Chain, or Diamond Model
Strong analytical thinking plus effective written and verbal communication
Ability to work collaboratively in a fast-paced, globally distributed team
Required: Professional working proficiency in Chinese (read, analyze, synthesize native-language sources)

Preferred Qualifications

Experience analyzing financially motivated cyber activity (phishing, scams, account compromise)
Basic scripting/programming experience (Python preferred) for data analysis/automation
Familiarity with underground ecosystems (forums/marketplaces/messaging such as Telegram)
Understanding of payment systems, cryptocurrency usage, or fraud typologies
Experience working with threat intelligence datasets / large-scale data analysis
Exposure to detection development or identifying malicious/suspicious indicators
Working knowledge of Russian is a plus

About Recorded Future

Recorded Future is an intelligence company that provides threat intelligence used to defend people and networks from cybersecurity threats. It serves a global client base with research and reporting generated from technical and open sources, including work across threat intelligence, engineering, and data science teams.