Drimva

Abnormal Security

Threat Researcher

$122K–$176K

Remote - USA · Remote · Full-time · Posted Oct 23, 2026

Experience
4+ years in threat intelligence, SOC operations, or a closely related cybersecurity discipline.

About the job

Researches active email and identity threats, synthesizes intelligence into defensible assessments, and delivers audience-tailored content and briefings to customers and internal teams.

What you'll do

  • Lead threat investigations, identify patterns, and develop intelligence assessments and recommendations from internal and external sources.
  • Create threat briefs, reports, presentations, webinars, and customer-ready intelligence tailored to audience needs.
  • Lead customer and prospect engagements and collaborate across Threat Intelligence, Detection, Sales, Customer Success, and Marketing; mentor analysts and improve workflows.

What they ask for

  • 4+ years of experience in threat intelligence, SOC operations, or a closely related cybersecurity discipline.
  • Working knowledge of email and identity attacks, IOCs, TTPs, attack campaigns, and MITRE ATT&CK; familiarity with threat intelligence platforms, intelligence-sharing communities, and threat hunting concepts.
  • Demonstrated security research, intelligence writing, analytical synthesis, and ability to independently present complex technical intelligence to varied audiences.
  • Demonstrated proficiency with AI tools and use of AI or automation to scale work; basic SQL proficiency.

Nice to have

  • Experience in email security, phishing detection, anti-abuse systems, detection engineering, incident response, or email threat containment.
  • Experience with Python or scripting, public-facing security content, customer-facing intelligence, analyst mentoring, or relevant security certifications.

Pay

$122,400 — $176,000 USD (base salary)

Tools

ChatGPT, Claude, Claude Code, Copilot, SQL, MITRE ATT&CK, Python

AI focus

Uses AI tools to accelerate research, synthesis, drafting, tailoring, and editing; develops workflows and automation to scale routine work, with human review and validation.

Model-written summary · the original posting is authoritative

First seen Oct 27, 2026 · Last verified Nov 5, 2026 (UTC)