Cyber Threat Intelligence Intern

We’re hiring a Cyber Threat Intelligence (CTI) Research Intern

If you love digging through the internet’s dark corners, playing with OSINT tools, and writing Python scripts to make sense of chaos, you’ll enjoy this.

You’ll help us track, analyze, and report on emerging cyber threats — with a strong focus on dark web and open-source intelligence (OSINT). Expect to work with real stealer logs, data leaks, threat actors, and contribute directly to our Threat Intel strategy.

What you’ll work on

Dark Web & Deep Web Research

Monitor forums, marketplaces, Telegram channels, paste sites, and other underground sources for leaked credentials, PII, configs, and access offers.

Identify and track threat actors, their aliases, activity patterns, and infrastructure.

OSINT-led Threat Hunting

Use tools like Maltego, SpiderFoot, Shodan, Censys, whois, etc.

Correlate data from dark web, social media, public feeds, and news into meaningful intelligence.

Python Scripting & Automation

Build / maintain Python scripts to automate data collection from open sources and dark web mirrors / APIs.

Clean, normalize, and enrich data (parse stealer logs, extract IOCs, tag entities).

Research & Knowledge Sharing

Track new ransomware groups, exploit kits, and data leak forums.

Document processes, tools, and findings so the wider team can reuse them.

What we’re looking for

Strong interest in cybersecurity, threat intelligence, and attacker behavior.

Understanding of OSINT, dark web vs deep web, Tor, and underground ecosystems.

Hands-on Python : APIs, scraping, parsing (regex), handling JSON / CSV.

Familiar with basics : IP, DNS, ports, HTTP / S, common attack types (phishing, credential stuffing, ransomware, breaches).

Able to read & interpret breach data (usernames, passwords, hashes, stealer logs) with strong ethics and confidentiality.

Good written communication — turning raw findings into clear summaries.

You don’t need to know everything on day one, but you must be curious, willing to experiment with tools / scripts, and serious about handling sensitive data responsibly.

What you’ll get Real-world exposure to dark web intelligence, stealer logs, and breach data workflows.

Experience building repeatable threat intel processes and automations.

Mentorship from security engineers / analysts and a chance to shape how our Threat Intel function evolves.

Paid internship with potential PPO.