Darknet collections analyst

· Own each new site from request to live collection: triage sourcing requests from customers, product and internal teams, check for duplicates and mirrors, and decline sites that aren’t relevant or don’t meet DarkOwl’s standards.

· Use in-house tools to build, tune and troubleshoot collection configurations, including sites that require authentication, and complete go-live checks before collection begins.

· Monitor the health of existing collections, prioritizing sites that fail, and fix, disable or find mirrors for broken configurations.

· Create and maintain accurate site records in our internal source catalog, and review and publish entries prepared by others.

· Manage the collections ticket queue by priority and age,

· Respond quickly to customer and product requests, and partner with engineering, DevOps and our wider collection team.

· Develop personas for, maintain situational awareness of, and stay up-to-date with happenings on the darknet, flagging notable new sites to the wider team.

· Contribute to DarkOwl blogs and threat intelligence content. Manage junior collections analysts in their day to day responsibilities and conduct personnel reviews.

Required Skills/Abilities:

· OPSEC-first mindset and behavior.

· Technical skills—such as scripting languages (Python/Bash) skills, task automation skills, working with Linux or Mac command line.

· Experience configuring web scrapers or crawlers, or working with HTML, CSS selectors/XPath, cookies and session authentication.

· You’re organized and comfortable managing multiple tasks, prioritizing by impact and urgency.

· You thrive in a fast-paced startup environment and are capable of working independently, while anticipating and meeting business needs.

· You communicate clearly in writing and work well across teams. You’re familiar with Cybersecurity, Cybercrime, Hacking Methodology, and/or Data Forensics.

Preferred Skills/Abilities, if applicable:

· Familiarity with ransomware leak sites, criminal forums and darknet marketplaces.

· Experience working in Jira and Slack-based workflows.

· You’ve created and managed personas on the deep web or darknet, encrypted chat platforms, or hacking forums. You know how to identify and use OSINT tools and techniques to surface relevant data or solve complex investigative issues.

Education:

You need to have 2-3 years experience as an analyst or data collector.