Threat Hunting Analyst

About ChainPatrol

ChainPatrol is a fully managed brand protection service. We detect and remove impersonator accounts, phishing sites, fake apps, and scam infrastructure targeting our clients' customers and employees. Our AI + Team detects threats around the clock, review them and start the enforcement within minutes of discovery. We have removed more than 10 million threats for brands from Web3, Fintech, Banking, etc.

The Role

You will lead proactive threat discovery and analysis across the platforms our clients' attackers actually use. That means finding what automated detection has not caught yet: new phishing infrastructure, impersonation campaigns as they spin up across social media, ads, apps, etc.

The best people in this role think like investigators. A single fake domain is rarely a single fake domain. You will connect signals across domains, social accounts, ads, and hosting infrastructure to map the networks behind campaigns, and you will feed what you learn back into our detection logic so the next campaign gets caught automatically.

What You Will Do

• Identify and investigate malicious domains, URLs, phishing sites, and brand impersonation campaigns.
• Hunt for threats across social platforms including Meta, X, Telegram, LinkedIn, etc.
• Detect and analyze fake ads and scam campaigns
• Build threat actor maps by correlating infrastructure, registration patterns, and behaviors
• Use tools like URLScan.io, passive DNS, and other threat intelligence platforms in investigations
• Develop advanced sourcing queries and improve hunting workflows
• Produce clear, high-quality threat intelligence reports for customers

What We Are Looking For

• Good understanding in threat hunting, OSINT, or cyber investigations
• Hands-on experience with tools like URLScan.io, passive DNS, and WHOIS.
• Ability to spot patterns across domains, infrastructure, and social activity
• Experience with social media threat detection
• Good analytical and problem-solving skills
• Excellent written and verbal communication skills

Work Environment

Our detection operations run 24/7. This role requires flexibility to work in shifts, including some evenings, weekends, or holidays depending on rotation.