Senior Network Intelligence Analyst

The Insikt Group within Recorded Future delivers intelligence across the cyber, geopolitical, and physical threat domains in support of government and public-sector missions worldwide. The Global Network Intelligence team focuses on large-scale internet telemetry, traffic analysis, and adversary infrastructure to understand, track, and expose malicious activity affecting national security, critical infrastructure, and public institutions.

Based in the Middle East, you will conduct research and analysis using flow-based network telemetry to identify, assess, and explain malicious infrastructure, threat actor behavior, and emerging risks. Your work will support government customer intelligence requirements and operational decision-making, with a primary focus on threats affecting public-sector organizations, critical infrastructure, and allied nations.

As an experienced individual contributor, you will independently deliver analytical work aligned with agreed research priorities, collaborate with colleagues across Insikt, and communicate findings to both technical and non-technical audiences.

• →Analyze large-scale network telemetry, including NetFlow and related flow-based data, to identify malicious infrastructure, command-and-control activity, scanning behavior, and adversary tradecraft.
• →Research and track threat actor infrastructure across IP space, autonomous systems, hosting providers, and geographic regions relevant to government and national security stakeholders.
• →Produce clear, well-sourced intelligence reports and assessments in response to government customer requests for information and priority intelligence requirements.
• →Independently carry out defined research assignments, developing analytical approaches and delivering findings within agreed scope and timelines.
• →Contribute to longer-term network intelligence research projects, collaborating with analysts across Insikt Group on work for government audiences and the broader intelligence community.
• →Work with other Insikt Group analysts, product teams, and reviewers to maintain analytic rigor, sourcing standards, and intelligence tradecraft.
• →Apply structured analytical techniques to assess observed network activity, evaluate alternative explanations, and communicate confidence levels, intelligence gaps, and potential implications for public-sector missions and critical services.
• →Provide specialized network intelligence expertise in internal reviews and briefings, including constructive feedback on colleagues’ analysis.
• →Participate in external engagements, including presenting intelligence findings and responding to analytical questions from government customers, partners, and intelligence community audiences.

• 5+ years of experience as an intelligence analyst, cyber analyst, network analyst, or in a similar analytical role.
• Strong hands-on experience analyzing network telemetry at scale, including NetFlow or equivalent flow-based data.
• A strong understanding of IP networking, routing, autonomous systems, and internet infrastructure, and the ability to apply that knowledge to infrastructure analysis.
• Demonstrated ability to independently investigate analytical questions and produce clear, well-sourced intelligence assessments for decision-makers.
• Experience applying the intelligence cycle, structured analytical techniques, and analytic writing methodologies.
• Proficiency with open-source intelligence tools and data sources relevant to network and infrastructure analysis.
• Ability to explain technical findings, analytical judgments, and limitations to technical and non-technical audiences.
• Ability to manage assigned work against agreed priorities and deadlines, incorporate feedback, and collaborate effectively within a globally distributed research team.

• Background in Computer Science, Computer Engineering, Information Security, or a related discipline.
• Familiarity with threats to critical infrastructure sectors such as energy, telecommunications, transportation, or government services.
• Knowledge of state-sponsored cyber activity and advanced persistent threat ecosystems.
• Experience supporting government, defense, law enforcement, or intelligence community customers.
• Experience briefing government stakeholders or contributing analysis to intelligence products developed with partner organizations.
• Proficiency in a regional language, particularly Arabic, to support collaboration with customers and partners across the Middle East.

#LI-Remote