Intelligence Analyst

ZeroFox protects what's real by removing what isn't. We steadfastly safeguard organizations from fraud, abuse, misinformation, and attack by preemptively exposing, disrupting, and eliminating external threats across the public attack surface — because when people can't tell what's real, they stop trusting everything.ZeroFox uniquely fuses Cyber Threat Intelligence, Brand and Domain Protection, Attack Surface Intelligence, Executive Protection, and Physical Security Intelligence in one platform packed with intelligence you'll actually use. Our continuous cycle — Discover, Validate, Disrupt — helps thousands of customers worldwide, including leaders in finance, media, technology, retail, healthcare, and government, reduce risk, accelerate response, and defend their world.We're growing fast, investing deeply in AI, and building a team of people who are serious about results and never take themselves too seriously. If you're ready to take the fight to the adversary, come defend your world with us.WHAT ZEROFOX WILL LOOK LIKE TO YOU ZTAC (ZeroFox Threat Analysis Center) is where ZeroFox's intelligence promise gets stress-tested every single day — real clients, real deadlines, threats that don't wait for business hours. This team doesn't just monitor the internet; it decides what actually matters on it, across physical security, cyber, geopolitical, and reputational risk at once. You're joining at a moment when clients are asking ZTAC for faster answers and sharper judgment than ever, and this role is where that gets built.THE ROLE You'll use ZeroFox's patented technology to pull relevant signal out of noisy, high-volume data — from mainstream social platforms to deep and dark web forums — and turn it into intelligence that actually changes what a client does next. The work spans physical security threats, cyber risk, geopolitical developments, reputational exposure, and compliance concerns, often in the same week, sometimes in the same report.This isn't queue-clearing. You'll research a threat, decide what's credible and what's noise, and write it up in a BLUF-first format a client's security team can act on without a follow-up call. You'll work daily security and incident alerts, support recurring intelligence deliverables, brief clients directly, and partner with Collection Management to keep the intelligence pipeline getting sharper — not just bigger.In your first 90 days, you'd be expected to run point on at least one recurring client deliverable, complete ZTAC's onboarding certifications, and independently produce a BLUF-format report your manager signs off on without edits.You'll thrive here if... You've done real OSINT and social media investigation work — 2–3 years of it — and know the difference between a lead and a rabbit holeYou can hold four threat categories (physical, cyber, geopolitical, reputational) in your head at once without losing the thread on any of themYou've written a BLUF-format report under deadline and had a client act on it the same dayYou're comfortable being the one who decides something is credible enough to elevate — nobody's rubber-stamping your judgmentGetting better at this daily — sharper tradecraft, new certifications, better sourcing — actually motivates youThis probably isn't for you if... You want a fully scoped ticket queue where someone else has already decided what's relevant — this role requires deciding that yourselfYou've never had to defend why you called something credible, or not, to someone who disagreedYou're not comfortable working the deep and dark web as part of the job — this role goes there regularlyBriefing a customer directly, live, makes you want to hand it off to someone elseYou're looking for a single-domain specialty — this role moves across physical, cyber, and geopolitical risk, and narrow focus isn't the job2–3 years of OSINT and social media research experience, including executive threat assessments or investigationsAbility to judge the credibility, value, and relevance of information across sources — and say so clearly in writingStrong written and oral communication skills; comfortable producing BLUF-style reports and briefing customers directlyExperience with at least one online investigative tool (Whois, Ping, Traceroute, or similar), plus proficiency in Google SuiteWorking familiarity with surface web platforms, blogs, IRC, message boards, and deep/dark web environmentsWould love, but we won't hold it against you: Experience conducting studies on threat vectors, actors, or trends and turning them into recommendationsDeep familiarity with deep/dark web tradecraft and the platforms threat actors actually useProject management instincts and a track record of managing customer relationships wellSome college coursework in cybersecurity, intelligence studies, or homeland securityWorking knowledge of a specific threat landscape — cybercrime, fraud, physical/corporate security, hacktivism, or geopolitical riskComprehensive health, dental, and vision (Cigna)401(k) with 3% match, 100% immediately vested — no cliffHSA with quarterly company contributionsCompany-paid disability and life insuranceGenerous time offAbout ZeroFox ZeroFox is on a mission to make the internet safer for all. Innovation is at our core – we are relentless in the pursuit of finding new ways to disrupt external cyber threats on the surface, deep, and dark web. ZeroFox offers the only unified cybersecurity platform combining advanced AI analytics, digital risk and privacy protection, full-spectrum threat intelligence, and a robust portfolio of breach, incident and takedown response capabilities to protect customers from growing threats across the external attack surface. It's a great time to join us in the Fox Den – with fresh private equity funding, expanding investments in AI, a people-first culture, and centers of excellence around the world, we're growing like never before.Equal Opportunity, Diversity & Inclusion We aim to build a team that represents a variety of backgrounds, perspectives, and skills. We embrace inclusion and ensure equal employment opportunity without discrimination or harassment based on race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, age, disability, national origin, marital or domestic/civil partnership status, genetic information, citizenship status, military or veteran status, or any other personal characteristic.#J-18808-Ljbffr

Government Careers

Show more