Profile cover
R

AI Nation-State Attribution Analyst

Ryan Kovacs

Full-time · Job · Washington

About the role

Attribution is the hardest problem in cyber threat intelligence. Anyone can see that an attack used Cobalt Strike and targeted energy sector companies. Determining whether that attack came from APT28, a copycat using purchased tooling, or a state-sponsored actor using deliberate false-flag techniques requires correlating behavioral fingerprints across campaigns spanning years, in the presence of adversaries who actively work to defeat attribution. We build attribution models for government clients and Fortune 100 companies whose threat intelligence teams don't have the data volume to train their own. Our proprietary dataset covers 8 years of campaign data across 140 tracked threat actors. You'll design ML models that extract behavioral signatures from malware samples, TTPs, and campaign timing patterns, and build the probabilistic attribution system that outputs confidence-weighted actor hypotheses rather than definitive labels. This role requires US citizenship and the ability to obtain security clearance. You'll work remotely but with occasional classified briefings via secure channels. The intelligence team is nine analysts and three ML engineers.

Responsibilities

  • Design ML models extracting behavioral signatures for nation-state attribution
  • Build probabilistic attribution system with confidence-weighted actor hypotheses
  • Develop features from malware behavioral traces, TTPs, and campaign timing patterns
  • Implement false-flag detection to identify deliberate misattribution attempts
  • Maintain and update attribution models as new campaign data arrives
  • Produce confidence-qualified attribution reports for government and enterprise clients

Requirements

  • 6+ years in ML with threat intelligence or cybersecurity domain experience
  • Experience with malware analysis, campaign tracking, or behavioral fingerprinting
  • Strong Python and statistical modeling skills
  • Understanding of nation-state threat actor TTPs and cyber campaign attribution challenges
  • US citizenship required; ability to obtain security clearance required

Benefits

  • Fully remote with occasional secure briefings
  • Top-of-market compensation for cleared roles
  • Comprehensive health benefits
  • Security clearance sponsorship
  • Annual $5,000 professional development budget

Keep exploring related roles

Use these topic pages to discover more roles in the same hiring cluster.

Categories

AI & Machine Learning Engineers data science & analytics

Skills

python pytorch scikit-learn sql spark

Related remote AI jobs

Nearby roles that share similar skills, categories, or hiring intent.

Browse all jobs

Senior AI Researcher- Pre-training (f/m/d)

RemoteAI company

Full-time Senior

AI Resident UK/EMEA

RemoteAI company

Full-time

Senior AI R&D Engineer – Model Training (f/m/d)

RemoteAI company

Full-time Senior

Senior Machine Learning Engineer (Clinical Team)

RemoteAI company

Full-time Senior

Conversational Modelling Research Engineer

RemoteAI company

Full-time

Multimodal AI Model Optimization Research Engineer

RemoteAI company

Full-time

Job Type

Full-time

Level

Senior

Language

English

Salary Range

$130k – $160k / year

AI Expertise

AI & Machine Learning Engineers data science & analytics

Skills

python pytorch scikit-learn sql spark statistics

Ready to apply for this role?

Create a free talent account in under 2 minutes.

  • Apply to verified AI companies
  • Get AI-matched job recommendations
  • Message hiring managers directly
  • Build your public AI talent profile
Create free account & apply Log in

Interested in this role? Create your free profile to apply.

Apply — create free profile