ZeroFox
Computer & Network Security
IntelligenceAnalyst
Neural analysis suggests this role is
optimal for Mid candidates.
“Intelligence Analyst at ZeroFox. Skills: intelligence analysis, open source research, investigations, written communication, report writing, OSINT work, multi-source collection, threat narrative, intelligence products, briefing stakeholders. own the intelligence cycle for a strategic enterprise account. collecting, evaluating, and synthesizing information from open, deep, and dark web sources into products that actually help security and risk leaders act”
Industry & Context.
Demonstrated ability to assess credibility and relevance across disparate data sources and produce clear, sourced, actionable analysis; genuine geopolitical instincts; understand how international dynamics translate to physical and reputational risk; map what's happening in the world to what it means for a specific organization; You've done real OSINT work — not just social media monitoring, but multi-source collection across surface, deep, and dark web environments — and you know how to turn raw findings into a coherent threat narrative; Sitting with an incomplete investigation while you continue to develop it is normal to you — uncertainty is a phase, not a blocker; drive your own research and draw your own conclusions with incomplete data; staying current is your responsibility; uncomfortable briefing senior stakeholders or presenting findings when there's ambiguity in the data
being the analyst who picks up the phone when something breaks outside of business hours, because the adversary doesn't work a 9-to-5, Mobility, walking, climbing, sitting, standing, reaching, bending, lifting (minimum of 10 lbs), fine eye-hand coordination, ability to travel =/< 10%, ability to remain calm under pressure, Must be able to sit and/or stand for extended periods of time, Must be able to use a computer, cell phone, monitor(s), mouse and keyboard extensively and for lengthy periods of time, The prospect of monitoring threats outside core business hours — occasionally and in support of actual incidents — isn't something you're willing to sign up for.
What They're Looking For.
Must Have
2–3 years of experience in open source research, investigations, or intelligence analysis, Demonstrated ability to assess credibility and relevance across disparate data sources and produce clear, sourced, actionable analysis, written communication — specifically report writing, Comfort across social media platforms, paste sites, message boards, and at least entry-level dark web environments, Proficiency with at least one investigative tool (Whois, Traceroute, Ping, or equivalent), working knowledge of Google Suite
Nice to Have
Fluency in a second language, particularly one relevant to global manufacturing, retail, or apparel supply chains, Background in public or private sector intelligence, risk consulting, or security operations, Familiarity with IPv4/IPv6, DNS records, email header analysis, or P2P environments, Experience with tools like Maltego, MISP, VirusTotal, Shodan, or similar investigative platforms, Experience briefing decision-makers or senior leaders in a professional setting
What You'll Do.
own the intelligence cycle for a strategic enterprise account
and synthesizing information from open
and dark web sources into products that actually help security and risk leaders act
daily and recurring deliverables: alerts
and executive briefings
being the analyst who picks up the phone when something breaks outside of business hours
use ZeroFox's platform alongside your own research instincts to track threat actors
identify emerging patterns
and brief stakeholders
get certified on ZeroFox's platform and methodology
take ownership of at least one recurring deliverable
begin building the threat landscape context specific to your client's geography and risk profile
How You'll Work.
Team & Collaboration
work alongside ZeroFox analysts; engage directly with your client's security team
Communication Scope
communication has to be as sharp as your analysis; written communication — specifically report writing; briefing decision-makers or senior leaders in a professional setting; ability to understand and follow written and oral instructions and directions; ability to read, write, listen and speak clearly
Full Job Description
**WHAT ZEROFOX WILL LOOK LIKE TO YOU** This role supports one of the world's most recognized consumer brands — a company with a global footprint, a high-profile executive population, and threat exposure that spans every timezone and threat landscape. You'll sit inside ZeroFox's Services and Analysis Team, producing intelligence that shapes real security decisions for a client whose brand is visible everywhere, all the time. This isn't background noise work. When something moves in a market or region your client operates in, you're the person connecting it to risk before it becomes an incident. **THE ROLE** You'll own the intelligence cycle for a strategic enterprise account — collecting, evaluating, and synthesizing information from open, deep, and dark web sources into products that actually help security and risk leaders act. That means daily and recurring deliverables: alerts, threat reports, trend assessments, and executive briefings. It also means being the analyst who picks up the phone when something breaks outside of business hours, because the adversary doesn't work a 9-to-5. This isn't a passive monitoring role. You'll use ZeroFox's platform alongside your own research instincts to track threat actors, identify emerging patterns, and brief stakeholders who need clarity under pressure. You'll work alongside ZeroFox analysts and engage directly with your client's security team — which means your communication has to be as sharp as your analysis. In your first 90 days, you'd be expected to get certified on ZeroFox's platform and methodology, take ownership of at least one recurring deliverable, and begin building the threat landscape context specific to your client's geography and risk profile. ** THE REALITY** **You'll thrive here if...** * You have genuine geopolitical instincts — you follow regional developments, understand how international dynamics translate to physical and reputational risk, and can map what's happening in the world to what it means for
Applying for this Intelligence Analyst role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
ANONYMOUS · UNFILTERED
What do employees actually say about ZeroFox?
Real rants from real employees. Read before you apply.