1 day ago

Black Lotus Labs Threat Researcher -APT Research

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Work on Lumen’s Black Lotus Labs Research & Analysis team conducting threat intelligence for advanced persistent threats (APTs). Use large-scale telemetry and datasets (e.g., netflow, malware, passive DNS) to hunt, track adversaries, and identify emerging infrastructure. Build AI-assisted and automation-driven workflows that turn observations into actionable intelligence for customers, while collaborating across research, engineering, data science, and security automation teams. Some customer travel in the DC area (~1x/month) is expected.

Location: Maryland, District of Columbia, West Virginia

Workplace: Remote

Employment Type: Full time

Job Function: Research & Scientific (R&D)

Key Responsibilities

•Leverage global datasets (e.g., netflow, malware, passive DNS) to track malicious actors, infrastructure, and campaigns, using AI-assisted and automation-driven methods to accelerate intelligence production.
•Define and implement techniques to track sophisticated adversaries and deliver actionable threat intelligence to Lumen customers using adversary, infrastructure, malware, and network behavior knowledge.
•Lead and enhance threat hunting by partnering with research, engineering, data science, and customer-facing teams while exploring new data sources and collaborating on AI-assisted workflow generation and automation design.
•Identify malicious activity across large-scale network, endpoint, DNS, routing, and enrichment data, scaling detection using Python-based automation, data pipelines, and machine learning techniques.
•Establish AI-powered analytical workflows and provide actionable analysis and strategic insights for emerging threats, vulnerabilities, adversary infrastructure, and automation-derived findings.

Travel: Low travel

Pay and Benefits

Salary: USD 145,456 - 193,940 annually

Perks:Health InsuranceLife Insurance401kGym MembershipLearning BudgetWellness Stipend

Key Requirements

•Proven experience in threat analysis and in-depth technical security research, including tracking nation-state malicious infrastructure using network traffic analysis.
•Fluency in threat hunting methodologies and attacker TTPs, with ability to derive actionable threat hunts, detections, and intelligence requirements from complex datasets.
•Experience with large-scale data analysis platforms, including tools such as PySpark.
•Experience with telemetry collection and analysis (OSINT, proprietary endpoint/network data, DNS and routing data) and/or threat hunt tooling that improves cross-organization visibility.
•Proven communication and presentation skills to clearly convey complex technical findings and intelligence judgments to technical and executive audiences.

Experience:Threat intelligenceSecurity researchNetwork traffic analysisTelemetryData scienceAI-assisted workflows

Skills:CommunicationPresentationCollaborationAnalytical rigorExplainability

Tech Stack:PythonPySparkNetflowMalwarePassive DNSDNSRoutingOSINTDockerHadoopSparkVector databasesWorkflow orchestrationMachine learningTensorFlowPyTorchLangGraphSemantic KernelAutoGenCrewAI

Eligibility

Security Clearance:TS/SCI

Company Brief

Lumen

Provides integrated communications, network, edge cloud, and security services to enterprise, government, and carrier customers, operating a global fiber network and delivering connectivity and managed IT solutions.

Industry: Telecommunications

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Monroe, United States

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Lumen

1 day ago

Black Lotus Labs Threat Researcher -APT Research

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 8 hours agoStatus: Live

Job Summary

Location: Maryland, District of Columbia, West Virginia

Workplace: Remote

Employment Type: Full time

Job Function: Research & Scientific (R&D)

Key Responsibilities

•Leverage global datasets (e.g., netflow, malware, passive DNS) to track malicious actors, infrastructure, and campaigns, using AI-assisted and automation-driven methods to accelerate intelligence production.
•Define and implement techniques to track sophisticated adversaries and deliver actionable threat intelligence to Lumen customers using adversary, infrastructure, malware, and network behavior knowledge.
•Lead and enhance threat hunting by partnering with research, engineering, data science, and customer-facing teams while exploring new data sources and collaborating on AI-assisted workflow generation and automation design.
•Identify malicious activity across large-scale network, endpoint, DNS, routing, and enrichment data, scaling detection using Python-based automation, data pipelines, and machine learning techniques.
•Establish AI-powered analytical workflows and provide actionable analysis and strategic insights for emerging threats, vulnerabilities, adversary infrastructure, and automation-derived findings.

Travel: Low travel

Pay and Benefits

Salary: USD 145,456 - 193,940 annually

Perks:Health InsuranceLife Insurance401kGym MembershipLearning BudgetWellness Stipend

Key Requirements

•Proven experience in threat analysis and in-depth technical security research, including tracking nation-state malicious infrastructure using network traffic analysis.
•Fluency in threat hunting methodologies and attacker TTPs, with ability to derive actionable threat hunts, detections, and intelligence requirements from complex datasets.
•Experience with large-scale data analysis platforms, including tools such as PySpark.
•Experience with telemetry collection and analysis (OSINT, proprietary endpoint/network data, DNS and routing data) and/or threat hunt tooling that improves cross-organization visibility.
•Proven communication and presentation skills to clearly convey complex technical findings and intelligence judgments to technical and executive audiences.

Experience:Threat intelligenceSecurity researchNetwork traffic analysisTelemetryData scienceAI-assisted workflows

Skills:CommunicationPresentationCollaborationAnalytical rigorExplainability

Tech Stack:PythonPySparkNetflowMalwarePassive DNSDNSRoutingOSINTDockerHadoopSparkVector databasesWorkflow orchestrationMachine learningTensorFlowPyTorchLangGraphSemantic KernelAutoGenCrewAI

Eligibility

Security Clearance:TS/SCI

Company Brief

Lumen

Industry: Telecommunications

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Monroe, United States

Website LinkedIn