Head of Threat Research

About this role

About Netcraft

Netcraft is the global leader in cybercrime detection and disruption. We’re a trusted partner for three of the four largest companies in the world and many large governments. We've blocked over 225 million cyber-attacks to date, and we take down around 33% of the world's phishing attacks.

Our purpose and passion are focused on just one thing: protecting the world from cybercrime.

That passion shapes how we work, too. We’re proud of our talented team and the value each person brings, and we’ve built a workplace where people feel supported and inspired. From strong benefits and wellness programs to meaningful collaboration and team connection.

About the Role

As Head of Threat Research at Netcraft, you will lead the team responsible for publishing research grounded in Netcraft’s unique data sets, including global malicious URL and domain telemetry, and a takedown corpus spanning more than 20 years of phishing, malware, and brand impersonation attacks.

This is a newly created role within the expanding Product Strategy and Emerging Threats team. You will conduct hands-on research, lead a small team of threat analysts, own the publication pipeline, and help represent Netcraft through conferences, webinars, media engagements, and written publications.

This is a remote position based in the United States, with occasional travel for conferences, team meetings, and customer engagements.

What the Job Involves

Content Leadership & Public Presentation

• Set editorial direction and quality standards across whitepapers, customer reports, blog posts, and briefing materials

• Speak at industry conferences and webinars, including keynotes, panels, and expert commentary

• Present complex findings to security analysts, senior executives, board members, and government officials

• Serve as a media spokesperson on Netcraft’s threat research, including interviews and commentary with media outlets

Research & Analysis

• Research phishing, malware, malicious JavaScript, and cybercrime campaigns using Netcraft’s threat intelligence platforms

• Produce threat assessments ranging from short reactive write-ups on active campaigns to in-depth briefings on threat actors and emerging trends using internal telemetry and open-source intelligence

• Track how threat actors exploit current events, emerging technologies, and changes in the threat landscape

• Attribute infrastructure and campaigns to named threat actor groups and criminal ecosystems over time

• Review the team’s research output for quality, accuracy, and technical depth prior to publication

Team Leadership & Collaboration

• Mentor and develop a team of threat analysts

• Partner with engineering and operations teams to turn research findings into detection rules, IOC feeds, takedown signals, and platform improvements

• Support complex customer engagements by mapping threats to frameworks such as MITRE ATT&CK, the Diam