Threat Researcher

At Infoblox, every breakthrough begins with a bold “what if.”

What if your ideas could ignite global innovation?

What if your curiosity could redefine the future?

We invite you to step into the next exciting chapter of your career journey. Bring your creativity, drive, your daring spirit, and feel what it’s like to thrive on a team big enough to make an impact, yet small enough to make a difference. Our cloud-first networking and security solutions already protect 70% of the Fortune 500, and we’re looking for creative thinkers ready to push that influence even further. Join us and discover how far your bold “what if” can take the world, your community, and your career.

How we empower our people is extraordinary: we’re recognized as a Glassdoor Best Place to Work 2025, Great Place to Work-Certified in five countries, and honored by Cigna as a Healthy Workforce honors for three consecutive years; and what we build is world class: named CybersecAsia’s Best in Critical Infrastructure 2024 — clear evidence that when first-class technology meets empowered talent, remarkable careers take shape. So, what if the next big idea, and the next great career story, comes from you? Become the force that turns every “what if” into “what’s next.”

In a world where you can be anything, Be Infoblox.

Threat Researcher

We have an opportunity for a Threat Researcher to join our ART (Axur Research Team) in Home office - Brazil, reporting to the Supervisor, Threat Intelligence. In this role, you will conduct investigations and research into external cyber threats, including phishing, fraud, leaked credentials, malicious infrastructure, and threat-actor activity. You will transform evidence from OSINT, underground sources, internal datasets, and customer-provided information into clear, actionable intelligence.

Collaborating closely with Threat Intelligence, Engineering, Automation, Product, and customer-facing teams, you will help expand investigative coverage, improve repeatable workflows, and support AI-assisted research and reporting capabilities. This role is designed for a developing threat researcher who can execute well-defined investigations, strengthen analytical judgment, and contribute to the team’s mission of turning external threat visibility into meaningful protection.

Be a Contributor — What You’ll Do

• Conduct end-to-end cyber threat investigations across phishing, brand abuse, fraud, leaked credentials, malware, and threat-actor activity
• Hunt for relevant artifacts across the deep web, dark web, Telegram channels, underground forums, social platforms, and other authorized sources
• Analyze URLs, domains, IP addresses, hashes, credentials, files, advertisements, and related evidence to identify malicious activity and exposure
• Enrich indicators with OSINT and threat intelligence sources such as VirusTotal, URLScan, WHOIS, passive DNS, Certificate Transparency logs, sandboxes, and community feeds
• Map phishing, fraud, and malware infrastructure by correlating related domains, hosting, certificates, campaigns, accounts, and actor behaviors
• Query internal datasets and approved intelligence platforms to identify patterns, quantify exposure, and connect findings across clients, brands, and campaigns
• Support investigations requiring careful communication, evidence collection, and interaction with threat actors under approved operational-security procedures
• Document investigative methods, evidence, confidence levels, limitations, and conclusions according to team standards
• Produce concise, evidence-based intelligence reports, investigation updates, campaign briefs, and executive summaries in English; Portuguese or Spanish proficiency is an advantage
• Contribute validated indicators, findings, and investigative context to internal intelligence platforms, monitoring workflows, and takedown or remediation processes

Be Prepared — What You Bring

• Two or more years of experience in cyber threat intelligence, threat hunting, fraud analysis, digital risk protection, SOC operations, incident response, OSINT investigations, or a related cybersecurity field
• Practical experience investigating phishing, fraud, brand abuse, leaked data, malicious domains, credentials, malware, or threat actors
• Working knowledge of indicators of compromise, attack infrastructure, tactics, techniques, procedures, and confidence-based analysis
• Experience using OSINT and threat intelligence tools to research domains, IP addresses, URLs, files, identities, infrastructure, or underground activity
• Ability to correlate evidence from multiple sources, distinguish facts from assumptions, and maintain clear source traceability
• Strong written communication skills, with the ability to produce structured, accurate, and actionable intelligence reports
• Familiarity with spreadsheets, structured data, search operators, basic scripting, or query languages such as SQL; Python is an advantage
• Ability to use AI-assisted research and productivity tools thoughtfully, validate generated content, and follow data-protection guidelines
• Ability to collaborate effectively, manage priorities across multiple investigations, ask for guidance, and incorporate feedback
• Bachelor’s degree or equivalent practical experience in Cybersecurity, Computer Science, Information Technology, Intelligence, Journalism, Languages, or a related field; relevant certifications or training are beneficial

Be Successful — Your Path

First 90 Days: Immerse in our culture, connect with mentors (Blox Buddies), and map the systems and meet with key stakeholders that rely on your work. Discuss and create short/long term goals.

Six Months:

• Independently complete standard investigations from intake through reporting, with consistent evidence quality and appropriate escalation
• Demonstrate reliable use of internal platforms, OSINT sources, and approved AI-assisted tools while maintaining source traceability and confidentiality
• Deliver clear reports and investigation updates that meet ART quality, documentation, and turnaround expectations
• Contribute validated indicators, campaign relationships, and workflow feedback that improve monitoring, enrichment, or remediation activities

One Year:

• Own investigations of moderate complexity with limited supervision and explain findings, confidence, and limitations to relevant stakeholders
• Identify recurring patterns across campaigns, brands, actors, or infrastructure and convert them into reusable hunting, monitoring, or reporting improvements
• Deliver at least one meaningful workflow, automation, or AI-assisted improvement that increases research quality, efficiency, consistency, or analyst capacity
• Serve as a dependable contributor to team knowledge sharing, peer review, onboarding, and cross-functional collaboration