Associate Cyber Intelligence Analyst

Rapid7 is looking for an Associate Threat Intelligence Analyst to join our Collection team and take our threat intelligence collection capabilities to the next level.

About the Team

As an Associate Threat Intelligence Analyst within the Collection Team at Rapid7, you will be responsible for identifying, obtaining, and ingesting high-value compromised data from dark web sources, while evaluating forums, black markets, and other cybercrime ecosystems to determine their intelligence value and alignment with Rapid7's strategic goals. You will play a critical role in ensuring our intelligence feeds are robust, relevant, and actionable.

About the Role

As an Associate Cyber Intelligence Analyst, your primary responsibility will be to deliver reliable analysis, maintain consistent performance, and contribute effectively to the team's objectives. Specifically, your focus will be to:

• Identify, access, and collect high-value compromised data and other threat intelligence from deep and dark web sources.
• Evaluate cybercrime forums, marketplaces, and other illicit platforms to determine their potential as ongoing collection targets.
• Monitor, track, and document emerging threat groups, leak sites, and data breach trends.
• Ingest and catalog collected datasets into internal systems for analysis and customer reporting.
• Collaborate with internal intelligence, engineering, and operations teams to refine collection priorities and ensure alignment with strategic goals.
• Maintain awareness of changes in dark web access methods, operational security, and source reliability.
• Support the creation of standard operating procedures for data acquisition and ingestion processes.

The skills and qualities you'll bring include:

• 1+ years of experience in cyber threat intelligence or a related role with familiarity in dark web ecosystems and OSINT tools.
• 1+ years of experience in the cybersecurity industry or equivalent knowledge of cybersecurity fundamentals and concepts gained through formal education.
• Knowledge of compromised data formats, breach data structures, and underground marketplace dynamics.
• Ability to work with Linux environments, including the use of command-line tools for processing and analysis of large datasets.
• Proficiency in handling structured and unstructured data formats, interpreting tabular data, and managing various file types.
• Experience executing scripts in Python or Bash, with a basic understanding of programming concepts as a plus.
• Demonstrated critical thinking and accountability, with the ability to evaluate the relevance and value of new sources, and adaptability when working through change or ambiguity.
• Excellent written communication skills in English; additional language proficiency (especially Russian) is a plus.
• Core Value Embodiment: Embody our core values to foster a culture of excellence that drives meaningful impact and collective success.

We know that the best ideas and solutions come from multi-dimensional teams. That's because these teams reflect a variety of backgrounds and professional experiences. If you are excited about this role and feel your experience can make an impact, please don't be shy - apply today.

About Rapid7

At Rapid7, our vision is to create a secure digital world for our customers, our industry, and our communities. We do this by harnessing our collective expertise and passion to challenge what's possible and drive extraordinary impact. We're building a dynamic and collaborative workplace where new ideas are welcome.

Protecting 11,000+ customers against bad actors and threats means we're continuing to push the envelope - just like we've been doing for the past 20 years. If you're ready to solve some of the toughest challenges in cybersecurity, we're ready to help you take command of your career. Join us.

Security and Compliance

Rapid7 is committed to keeping customers secure. As a first line of defense, all employees are expected to uphold the highest standards of security and privacy, ensuring the protection of sensitive information and compliance with relevant regulations.