About the Role

Trurion empowers organizations with cybersecurity, AI risk management, cyber threat intelligence, and continuous monitoring — helping them identify, assess, and confidently mitigate evolving digital risks.

As an OSINT Researcher, you find what is publicly available but not obvious. You will map client and third-party attack surfaces, investigate adversary infrastructure, trace corporate and technical relationships across public records and technical sources, and surface exposure before someone hostile does. The work supports our threat intelligence, third-party risk, and continuous monitoring practices.

This is an investigative role within the sourcing discipline. Every claim you make gets traced back to something verifiable, every confidence level is stated, and every collection method stays inside legal and ethical lines. We are not interested in researchers who cut those corners — in this field, it is how you get a client sued and yourself unemployable.

Responsibilities

Collection and research: Conduct structured open source research across search engines, public records, corporate registries, technical infrastructure sources, social platforms, code repositories, paste sites, and data breach corpora to answer defined intelligence requirements.

Attack surface and footprint mapping: Enumerate and validate the external digital footprint of client and third-party organizations — domains, subdomains, IP ranges, certificates, exposed services, cloud assets, and inadvertently published documents or credentials.

Infrastructure investigation: Pivot across DNS records, WHOIS and registration history, certificate transparency logs, hosting relationships, and passive telemetry to map adversary infrastructure and establish links between assets, campaigns, and operators.

Deep and dark web monitoring: Monitor closed forums, marketplaces, and messaging platforms for references to client organizations, leaked data, credential exposure, and emerging threat activity — always within approved legal and operational boundaries.

Source validation: Corroborate findings across independent sources, assess source reliability and information credibility, and clearly distinguish confirmed facts from assessments. Document your collection path so any finding can be reproduced and defended.

Operational security: Maintain disciplined OPSEC for research, including proper use of managed research infrastructure and non-attributable accounts in line with company policy. Never compromise a client engagement through careless attribution.

Reporting: Produce written research products — investigation summaries, exposure reports, entity profiles, and supporting evidence packages — that are clear, precisely sourced, and usable by technical and executive audiences.

Tooling and methodology: Improve internal collection workflows, automate repetitive research tasks, evaluate new tools and sources, and contribute to the team's documented tradecraft and quality standards.

Legal and ethical compliance: Operate strictly within applicable law, platform terms, and client authorization. Escalate anything ambiguous before acting rather than after.

Requirements

• Minimum of a Bachelor's degree in Computer Science, Information Technology, Data Analytics, Cybersecurity, Digital Forensics, or an equivalent major
• 5+ years of experience in OSINT research, threat intelligence, investigations, digital forensics, or a closely related analytical field
• Demonstrated proficiency with open source research techniques, including advanced search operators, public records and corporate registry research, and social media analysis
• Practical experience with technical reconnaissance sources — DNS and WHOIS records, certificate transparency, passive DNS, and internet-wide scan data
• Understanding of networking, DNS, TLS, and common internet infrastructure concepts
• Ability to apply structured analytic techniques, state confidence levels, and identify collection gaps rather than fill them with assumptions
• Strong writing skills, with the ability to produce precisely sourced findings for mixed technical and non-technical audiences
• Sound judgment regarding research OPSEC, privacy, and the legal boundaries of open source collection, including familiarity with relevant data protection expectations
• Meticulous documentation habits and a high tolerance for dead ends
• Must be legally authorized to work in the United States without sponsorship

Preferred Qualifications

• Hands-on experience with tools such as Maltego, SpiderFoot, Shodan, Censys, Recon-ng, or comparable platforms
• Scripting ability in Python for collection, enrichment, and data processing
• Relevant training or certification, such as SANS SEC487, GOSI, GCTI, or an equivalent investigative credential
• Experience supporting third-party risk, due diligence, fraud, or brand protection investigations
• Familiarity with geospatial and imagery analysis techniques
• Working knowledge of a language other than English relevant to threat actor research
• Background in journalism, law enforcement, military, government intelligence, or corporate investigations
• Experience with data breach and credential exposure analysis

What's on Offer

• Competitive base salary with an annual performance bonus
• Comprehensive medical, dental, and vision coverage
• 401(k) with company contribution
• Paid time off, paid holidays, and paid parental leave
• Annual budget for training, certifications, and conference attendance
• Access to commercial data sources, managed research infrastructure, and internal collection tooling
• Hybrid schedule from our Atlanta office, or fully remote within the United States

Trurion, LLC is an Equal Opportunity Employer. We evaluate all qualified applicants without regard to any characteristic protected by applicable federal, state, or local law.