Digital Threat Analyst

About Unphish

Unphish helps organisations detect, investigate and disrupt digital threats targeting their brands, customers and employees. Our platform combines automation, threat intelligence and expert analysis to identify online abuse and coordinate enforcement across the internet.

We are growing, with new clients and services expanding the reach of our Threat Operations team. This is an opportunity to work directly with clients, solve challenging cases and help shape how we deliver the service as we scale.

About the Role

As a Digital Threat Analyst, you'll investigate and respond to online threats affecting our clients, with a particular focus on phishing, domain abuse, brand impersonation and digital enforcement.

You'll take ownership of cases from investigation through to resolution, working with domain registrars, hosting providers, social media platforms and other online services to disrupt malicious activity.

Our platform automates much of the routine detection, case management and enforcement process. Your role is to provide the expertise behind that automation, investigating complex cases, identifying gaps and determining the best course of action when standard workflows aren't enough.

You'll report to the Head of Threat Operations and work closely with our analysts, product and commercial teams.

What You'll Do

Digital Threat Investigations

• Review platform alerts and client submissions, assess risk and gather evidence using open-source intelligence, DNS and registration data, technical checks and client context.
• Check that monitoring, case routing and automation are working as expected. Investigate missed threats, unusual results and gaps that could affect client coverage.
• Prioritise work against risk and service levels, follow established processes and maintain accurate case records.

Progress Enforcement Cases

• Use reporting and enforcement routes across registrars, hosting and DNS providers, social platforms, marketplaces, search services and other online services.
• Step in when enforcement stalls or the platform cannot determine the next action. Review what has been tried, investigate the available routes and progress the case.
• Follow up with providers, adapt reports or escalation approaches as needed, verify outcomes and raise material risks promptly.

Support Clients & Improve Service Delivery

• Understand clients in your region, their brands, priorities and agreed service scope. Provide clear updates, explain findings and enforcement options, and participate in client meetings.
• Follow through on client requests and work with the wider team to resolve issues affecting service delivery.
• Stay informed about emerging threats and changes to provider policies.
• Develop repeatable enforcement workflows from new or difficult cases, and identify improvements to monitoring, automation and team processes.
• Contribute to procedures, quality checks, training and knowledge sharing.

About You

We're particularly interested in candidates who have hands-on experience investigating online threats and working with service providers to remove or disrupt malicious content.

You understand how internet infrastructure and online abuse reporting work, and you're comfortable taking ownership of an investigation when the obvious enforcement route doesn't deliver an outcome.

Essential Skills & Experience

• Experience in digital risk protection, brand protection, threat intelligence, online fraud, trust and safety, or a closely related cybersecurity function.
• Strong understanding of phishing, domain abuse, impersonation and online fraud.
• Practical experience investigating digital threats using OSINT, DNS, WHOIS/RDAP and other online intelligence sources.
• Experience reporting malicious activity to registrars, hosting providers, online platforms or other service providers, including managing follow-ups and escalations.
• Strong analytical skills, attention to detail and the ability to manage multiple investigations.
• Confident written and verbal communication skills, including the ability to explain findings and recommendations to clients.

Desirable Experience

• Experience with domain takedowns, abuse desk operations or online content enforcement.
• Knowledge of trademark, copyright, DMCA and platform policy-based enforcement.
• Experience with digital risk protection or brand protection platforms.
• Understanding of DNS infrastructure, domain registration and hosting environments.
• Experience supporting enterprise clients or improving automated investigation and enforcement workflows.

Why Join Unphish?

• Flexible working: We're open to remote candidates globally, provided they can work Australian business hours.
• Meaningful work: Help protect organisations and their customers from phishing, fraud and impersonation.
• Real ownership: Investigate challenging cases, determine enforcement strategies and see the outcomes of your work.
• Direct client exposure: Work with major organisations across Australia and internationally.
• Help shape the business: Join a growing team where your experience and ideas can directly influence our platform, operational processes and how we deliver our services.
• Career development: Develop your expertise, take on broader responsibilities and grow with us as Unphish expands internationally.

Interested?

If you have hands-on experience investigating digital threats, navigating online abuse reporting processes and achieving enforcement outcomes, we'd love to hear from you.

We're looking for someone who enjoys solving complex problems, takes ownership of their work and wants to make a real impact in a growing business.

Location is flexible. The right experience, initiative and ability to work collaboratively with our Australian team are what matter most.