> Markdown version of [/jobs/ext/3877958-investigative-researcher-cyber-threat-intelligence](https://www.wearedevelopers.com/jobs/ext/3877958-investigative-researcher-cyber-threat-intelligence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Investigative Researcher, Cyber Threat Intelligence

- **Company:** Control Risks Group Holdings Ltd
- **Location:** London, UK (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Cyber Security, Computer Telephony Integration, Intelligence Analysis, Open Source Technology, Open Source Intelligence, Pivot Tables, Power BI, Blockchain, Enterprise Software Applications, Macros, Microsoft Power Automate, Mitre Att&ck, Cyber Threat Analysis
- **Published:** October 23, 2026
- **Apply:** https://apply.workable.com/control-risks-6/j/EA6A623C2D

## About the Role

* Interest in and knowledge of cyber threat and risk issues and the interaction between political developments and the evolving threat landscape.
 * Interest in and knowledge of intelligence and threat assessment principles, understanding of methods used to identify, understand and compare threat actors.
 * Experience in undertaking operational and tactical level research and investigations relating to cyber threat incidents or using cyber as a means of collecting information.
 * Academic or professional training in cyber investigations or open-source intelligence.
 * Ability to prepare sizable written reports for a senior business audience.

Preferred

 * Additional languages to English. Russian, Chinese, Farsi preferred.

Qualifications and specialist skills

Essential

 * Degree level qualification or equivalent.
 * Demonstrable experience in collecting information from multiple sources in support of complex research projects in the online intelligence or cyber threat and security domains.

Preferred

 * Intelligence analysis training or qualifications (e.g. City and Guilds, SANS GIAC, CREST threat intelligence practitioner or researcher, GIAT or DIAM UK government modules).
 * Open-source intelligence collection and investigation qualifications.
 * Interest and experience in the cryptocurrency landscape with the ability to analyse threats and investigate using blockchain technology.
 * Familiarity with software packages including i2 Analyst Notebook, high level of Microsoft Excel proficiency (knowledge of pivot tables and macros), Power BI or Power Automate.

## Description

As the Investigative Researcher you will conduct desktop and online investigative research into cyber and online threats, to enrich our Cyber Threat Intelligence (CTI) reporting and support bespoke investigations. This role will primarily involve conducting threat actor and incident-focused research, contributing regular reporting for Control Risks' Cyber Incident Response team, producing context for the Seerist platform and supporting ad-hoc investigative projects. Please note that this role requires you to work from our London (Bank/Monument) office at least three days per week on a hybrid basis., Research and information gathering

 * Conduct regular profiling of cyber threat actors to support on-going incidents and investigations.
 * Demonstrate strong investigation skills relating to specific cyber threat incidents, data breaches and other cyber security incidents.
 * Research new sources of information and develop capabilities to collect and analyse information in support of the team.
 * Build knowledge of collection tools to support bespoke investigative projects and Cyber Incident Response engagements.
 * Contribute continuous research for inclusion in routine CTI reporting and bespoke threat assessments.
Develop knowledge of principal cyber and online threat actors through research on open source, social media, deep and dark web sites and Control Risks internal intelligence systems.

 * Support our clients with regular monitoring of our deep and dark web sources. Please note that this role includes some flexible weekend monitoring.

General analytical responsibilities

 * Support analysis on bespoke projects through data collection across all CTI products, demonstrating an ability to make judgments on the value of research collected.
 * Be technically aware and understand basic cyber security principles e.g. MITRE ATT&CK, the unified kill chain, the intelligence life cycle.
 * Be alert to the political implications of developments among cyber threat groups and bring these to the attention of other service lines.
 * Contribute analysis for subscription updates.

Marketing and business development

 * Support business development through initial research scoping for proposals and other business development and marketing exercises.