Senior DarkWeb Intelligence Lead

🏢 Accenture · all 170 jobs
📍 United States
💰 USD 87,400 - 270,300 / annual
📅 Posted Sep 21, 2026 · via Himalayas
🏷 Dark Web Intelligence, Threat Intelligence, Threat Analyst, Security Intelligence Analyst, Threat Hunter, Senior Director Threat Intelligence Analyst +6 more
Apply on original site ↗

We Are

Accenture is a global collective of innovators whose aim is to improve the way the world works and lives. Empowered with innovative tools, continuous learning, and a global community of diverse talent, we drive success in new business architecture that disrupts conventional practices. We are looking to add an experienced Senior Dark Web Analyst to an already outstanding team.

Accenture Security helps organizations prepare, protect, detect, respond to, and recover across all points of the security lifecycle. We hire top-tier security talent and equip them with advanced tools and technologies to build resilience through integrated, customized solutions.
You Are

A highly experienced cyber threat intelligence professional with direct operational experience in underground environments. You bring both technical depth and leadership capability, with a proven ability to collect intelligence firsthand and translate it into actionable insight. You operate with strong discipline, discretion, and a commitment to protecting long-term access and operational integrity.
The Work

You will lead and contribute to Accenture ’s dark web and underground intelligence collection capability. This includes persona-based collection, monitoring criminal ecosystems, and producing actionable intelligence for operational teams.
Key responsibilities include:

-
Executing persona-based access and intelligence collection within criminal forums and marketplaces

-
Monitoring ransomware leak sites, Initial Access Broker (IAB) activity, and underground ecosystem trends

-
Producing intelligence reporting derived from firsthand collection activities

-
Developing and executing collection requirements aligned to stakeholder needs

-
Evaluating source credibility and validating claims within underground environments

-
Maintaining secure persona infrastructure and anonymized collection environments

-
Mentoring junior analysts and supporting persona development lifecycle

-
Partnering with legal and compliance stakeholders to ensure adherence to collection authorities

-
Delivering briefings to senior stakeholders while protecting sensitive collection methodologies

Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.
Here's what you need

-
Minimum 7 years of professional experience in cyber threat intelligence (CTI), cybercrime investigations (law enforcement), or intelligence community equivalent

-
Minimum 3 years of hands-on experience conducting direct dark web or underground collection, including active engagement in forums or marketplaces

-
Minimum 3 years of hands-on experience with at least two of the following platforms: Flashpoint, Intel 471, Cybersixgill, Recorded Future

-
Minimum 1 year of experience leading, mentoring, or supervising analysts, including tasking and reviewing analytical output

-
At least 12 months of experience operating one or more personas within restricted or criminal online communities

-
Bachelor's degree or equivalent (minimum 12 years) work experience. (If Associate’s Degree, must have minimum 6 years work experience)

Professional Skill Requirements
-
Demonstrated experience producing original intelligence reporting based on firsthand collection, with at least 5–10 completed intelligence products (e.g., reports, alerts, briefings)

Bonus points if you have

-
Practical experience accessing and collecting intelligence via TOR, I2P, or comparable anonymization networks

-
Experience building or maintaining secure persona infrastructure, including virtual machines, VPN/proxy chaining, and compartmented digital identities

-
Experience with structured or semi-automated data collection methods, including forum scraping, data extraction tools, or indexing workflows

-
Demonstrated familiarity with ransomware ecosystems, including tracking ransomware groups or leak sites

-
Demonstrated familiarity with cyberc

Flights + hotels

This role requires you to be in the United States. If that means relocating or flying in, it is worth checking fares before you commit to a start date.

Compare flights and hotels →

← All remote jobs

Get new remote jobs like this by email
Daily email, only when there's something new. One click to stop.

Get remote jobs like this by email

10 hand-picked jobs, one email a day. No spam, unsubscribe anytime.

Similar for you