Threat Intelligence Researcher | Principal

Details

Join NordVPN's Threat Intelligence team to lead research and shape Threat Protection capabilities used by millions. The team brings together Data Science, Malware Research, Development, and Privacy specialists to produce timely, evidence-based intelligence using feeds, heuristics, algorithms, and machine learning. In this principal role you'll drive research direction, partner with product and engineering, and amplify findings publicly.

Responsibilities

• Act as the principal subject-matter expert for Threat Intelligence and help set the team's research direction.
• Translate research into new or improved protection vectors for the NordVPN Threat Protection product.
• Collaborate with Marketing and PR to provide data-driven context on cybersecurity trends.
• Share concise, evidence-based insights on social channels about emerging threats, notable campaigns, and practical safety guidance.
• Contribute to scripting short-form video explainers and participate on camera when needed.
• Partner with Data Science and Engineering teams to improve ML-based Threat Intelligence and validate impact with clear metrics.
• Recommend and help onboard new tools, data sources, and processes that increase Threat Intelligence efficiency and consistency.
• Mentor and coach junior researchers.

Requirements

• 4+ years of hands-on experience in the Threat Intelligence field.
• Comfortable sharing insights publicly (e.g., social media, blogs, or talks).
• Deep understanding of the intelligence lifecycle: collection, enrichment, pivoting, and dissemination of threat indicators and behaviors.
• Ability to conduct research on protection improvements that results in a clear, argued, evidence-based action plan (collaborating with Data Science and Engineering as needed).
• Curiosity and passion for cybersecurity, with an active habit of staying current on industry trends.

Bonus

• Experience collaborating with Data Scientists on model development (requirements, data curation, evaluation).
• Prior media experience (e.g., interviews or on-camera appearances) on Threat Intelligence topics.

Compensation and Logistics

• Gross salary: 5,200 - 7,000 EUR per month (listed by the employer).
• Workplace type: hybrid. Primary locations: Vilnius and Kaunas (Lithuania).
• Commitment: Full Time.

About the Team

• The Threat Intelligence team focuses on providing accurate and timely information on threats to NordVPN products, using feeds, heuristics, algorithms, and machine learning.
• You will work closely with Data Science, Malware Research, Development, and Privacy colleagues to drive improvements in Threat Protection capabilities.