Cybersecurity Threat Researcher (Position located in Cheltenham, United Kingdom)

KnowBe4 is the global leader in Human Risk Management, trusted by over 70,000 organizations worldwide to secure their employees and AI agents for over 15 years. We're pioneering a new era of security. AI-powered since 2016. And market-leading since day one.

Our HRM+ combines continuous risk intelligence, advanced technical defenses, and personalized training to help organizations build strong security cultures. We help organizations understand, measure, and reduce human risk across their entire workforce, defending against, deepfakes, and emerging AI-powered threats.

We believe that protecting organizations from cyberthreats and creating a positive environmental impact go hand in hand. True resilience is collective, it requires us to protect our people, our data, and our planet.

To learn more about our team and office culture in England (UK), visit the following links.
Careers Page: https://www.knowbe4.com/careers/locations/york
Glassdoor: https://www.glassdoor.com/Location/KnowBe4-York-Location-EI_IE969384.0,7_IL.8,12_IC3297365.htm
LinkedIn: https://www.linkedin.com/company/knowbe4/life/uk/

The Cybersecurity Threat Researcher works in the KnowBe4 Threat Research Lab, and is responsible for deploying and configuring various security products and solutions such as endpoint, email, web and network protection.

Responsibilities:

• Analysing trends and patterns in large data-sets to establish threat trends across regions, industries and business segment sizes.

• Have a passion for cyber security and thrive on solving difficult and complex problems.

• Have a genuine interest in mitigating phishing attacks and be familiar with recent vulnerabilities in our space. Investigate phishing emails and have an understanding of Malware Analysis (Configuration of isolated Malware Analysis VM, Identification of File Formats, Basic Static & Dynamic analysis)

• Enjoy sharing their knowledge and working with team members and external stakeholders.

• An understanding and experience with Threat Actor Tools and techniques: (MITRE ATT&CK Framework, PowerShell & Command Prompt Terminals, WMIC, Scheduled Tasks, SCM, Windows Domain and host Enumeration Techniques, Basic Lateral Movement Techniques, Basic Persistence Mechanisms, Basic Defense Evasion Techniques, other offensive/Red Team TTPs)

• Triage, investigate, and respond to alerts coming in from the Knowbe4 email platform efficiently and without support.

• Contribute regularly to external-facing Knowbe4 Threat Labs content such as blogs.

Requirements:

• BS or equivalent plus 3 years experience

• MS or equivalent plus 1 year experience

• Well versed with IOCs, reverse engineering and threat campaign tracking

• Experience in malicious URL and phishing Email analysis

• Script enabled for scripting automations (Python) for handling huge volumes of threat artifacts like files, emails, URLs etc

• Experience with public speaking and triaging complex customer queries.

Our Fantastic Benefits

We offer company-wide bonuses based on monthly sales targets, employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses - all in a modern, high-tech, and fun work environment. For more details about our benefits in each office location, please visit www.knowbe4.com/careers/benefits.

Note: An applicant assessment and background check may be part of your hiring procedure.

Individuals seeking employment at KnowBe4 are considered without prejudice to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or any other characteristic protected under applicable federal, state, or local law. If you require reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please visit www.knowbe4.com/careers/request-accommodation.

No recruitment agencies, please.