R

Recorded Future

Machine-readable threat intelligence with VAR partnerships

Principal Technical Account Manager

Full-TimeUpdated on 10/14/2026
No salary listed
Senior, Expert
Bachelor's
Tokyo, Japan
In Person
Solution EngineeringImplementation & Technical Account Management

About the job

Requirements
  • Have 7–10 years of consulting, intelligence advisory leadership, or other customer-facing cyber threat intelligence, security operations, or cyber advisory experience in enterprise or vendor settings.
  • Have deep experience in at least two security domains, including intelligence, security operations, vulnerability management, governance, risk and compliance, threat hunting, or incident response.
  • Demonstrate strong understanding of intelligence principles, methodologies, and tradecraft; intelligence operationalization in complex environments; and the threat landscape and security trends.
  • Have extensive experience with intelligence platforms, application programming interfaces, data feeds, security integrations such as security information and event management, threat intelligence platforms, and security orchestration, automation and response; software-as-a-service ecosystems; and security architectures.
  • Have deep experience driving strategic value realization and retention in large-scale environments.
  • Demonstrate ability to translate intelligence insights into actionable, measurable business and security outcomes and communicate complex concepts to technical and non-technical audiences, including C-suite executives.
  • Have strong analytical, presentation, stakeholder-management, public-speaking, verbal and written communication skills, and attention to detail.
  • Have proven success in account health management, risk mitigation, retention, and growth, including monitoring adoption metrics, usage trends, and integration performance.
  • Have a strong understanding of the Intelligence Lifecycle and security frameworks including MITRE ATT&CK, NIST, the Diamond Model, and the Cyber Kill Chain.
  • Have a bachelor's degree or related experience in cybersecurity, computing science, intelligence studies, or a related field.
  • Be able to work from the Tokyo office.
  • Be a native Japanese speaker and conversational in English.
  • Have leadership, influence, and communication abilities at C-suite level; a consultative mindset; and experience leading complex, multi-stakeholder initiatives across technical and business teams.
Responsibilities
  • Own the technical and strategic success of assigned customer accounts throughout their intelligence journey, from onboarding to renewal.
  • Partner with customers to define and deliver intelligence-led outcomes using the full suite of platform capabilities, integrations, and services.
  • Monitor and act on customer adoption, health, and renewal-risk signals, including budget constraints, competitive pressure, and stakeholder turnover.
  • Lead executive and technical business reviews, presenting value-realization metrics, maturity progression, and intelligence-driven performance insights.
  • Anticipate customer needs and identify growth opportunities to support satisfaction, retention, and platform expansion.
  • Serve as the primary strategic advisor for key enterprise and global accounts, collaborating with customers’ security operations center, cyber threat intelligence, engineering, governance, risk and compliance, threat hunting, and vulnerability management teams on configuration, data integration, and optimization.
  • Design and execute customer-success and intelligence-adoption plans aligned with business priorities and measurable outcomes, in partnership with account directors and cross-functional teams.
  • Collaborate with sales, product management, data science, and intelligence teams to provide a unified customer experience.
  • Deliver bespoke intelligence advisory engagements addressing emerging threats, collection priorities, intelligence workflows, configuration and tuning, and customer tradecraft and platform proficiency.
  • Advocate for Recorded Future capabilities and represent customer needs to influence product-roadmap and services alignment.
  • Champion best practices and enablement frameworks across the global technical account manager community.
  • Manage multiple concurrent priorities while maintaining quality and meeting organizational metrics and key performance indicators.
  • Maintain accurate records of customer successes, outcomes, sentiment, and technical plans for at-risk accounts and high-impact issues.
Desired Qualifications
  • Advanced certifications such as CISSP, OSCP, GCTI, or GCIH.

About the company

Recorded Future provides machine-readable threat intelligence to help organizations lower the risk of cyber attacks. Its data can be integrated with customers' existing security tools and workflows used by SOCs, IR teams, and vulnerability programs. The company grows via a partner-led model with VARs, offering training, certifications, and marketing support to help partners sell and implement the technology. Revenue comes from direct sales and VAR partnerships with recurring revenue and margins, and its goal is to help organizations detect, understand, and respond to threats more effectively.

Company Size

1,001-5,000

Company Stage

Acquired

Total Funding

$58.7M

Headquarters

Somerville, Massachusetts

Founded

2009

Get referred to Recorded Future

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • June 2, 2026 Wipro partnership expands managed threat intelligence across global enterprises.
  • July 28, 2026 Pentera partnership turns intelligence into validated exposure reduction at Black Hat.
  • August 2026 Automated Signature Creation and AI Alert Filtering reduce analyst toil and accelerate remediation.

What critics are saying

  • Singh v. Recorded Future filed July 9, 2026, exposes post-acquisition labor friction.
  • Mastercard integration risks product autonomy; enterprise buyers shift budgets toward platform-native security vendors by 2027.
  • Threat-intelligence commoditization compresses pricing as Microsoft, Google, and CrowdStrike bundle similar enrichment.

What makes Recorded Future unique

  • Mastercard completed Recorded Future acquisition on December 20, 2024, amplifying distribution.
  • Its Intelligence Graph spans 200 billion nodes, spanning adversaries, infrastructure, and targets.
  • September 2026 MCP connects Claude, ChatGPT, Copilot, Cursor, and Gemini CLI.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Professional development and career advancement

Flexible work environment, be yourself

Generous vacation policy

Wellness programs

Company outings

Competitive compensation and benefits

Free snacks, drinks, and coffee in the office

Parental leave program

Environmentally conscious

Growth & Insights and Company News

Headcount

6 month growth

0%

1 year growth

1%

2 year growth

8%
The SaaS News
Oct 13th, 2026
Graylark raises $10.7M seed led by General Catalyst for AI visual intelligence platform

Boston-based Graylark has raised $10.7 million in a seed round led by General Catalyst. AI Grant, Alexandr Wang, and Recorded Future also took part. The company builds AI-powered visual intelligence tools. Its Raven platform helps investigators work out where images were captured, identify vehicles, and check whether visual content has been manipulated or synthetically generated. Graylark will use the money to expand its research team, build new purpose-made vision models, strengthen its data infrastructure, and bring Raven to more law-enforcement and government organisations. Founder Daniel Heinen says the company aims to turn the physical world into real-time search.

Today in New York
Oct 8th, 2026
Nagomi Security and Recorded Future announce partnership to Connect Threat Intelligence and exposure elimination.

Nagomi Security and Recorded Future announce partnership to Connect Threat Intelligence and exposure elimination. Agents Connect Threat Intelligence to Live Environment Data to Validate Exposure and Drive Remediation Recorded Future tells its customers what is coming before it arrives. Agentic Exposure Ops turns that head start into exposure they have actually eliminated." - Emanuel Salmona NEW YORK CITY, NY, UNITED STATES, September 30, 2026 / EINPresswire.com / - Nagomi Security, the pioneer of Agentic Exposure Operations, today announced a partnership and native integration with Recorded Future, the world's largest threat intelligence company. For joint customers, Recorded Future intelligence now runs inside the Nagomi platform, where every change in intelligence dispatches a fleet of autonomous agents into the customer's live environment. The agents determine whether the conditions an attacker needs to succeed exist there and drive the work to close exposures. Recorded Future correlates threat actors, campaigns, infrastructure, vulnerabilities, and techniques across more than a million sources and gives customers a granular view of the external threat landscape they cannot build on their own. That specificity allows Nagomi's agents to investigate the threats that apply to a given organization rather than a generic scenario. A threat actor becomes a genuine problem for an organization only when a toxic combination of conditions exists: assets that run vulnerable software, assets exposed to the internet, and missing, misconfigured, or alert-only controls meant to stop the actor's TTPs. On their own, teams can take roughly a week to verify a single campaign against a standing remediation backlog. Most enterprises can only read and file the intelligence rather than act on it. The integration turns intelligence into the tasking input for autonomous agents rather than a document for human review. The unit of work is change: a newly mapped technique against a tracked actor, a CVE that moves from theoretical to actively weaponized, a new threat actor that targets the organization, or a credential exposure. Nagomi's agents called AI Exposure Eliminators investigate conditions and validate exploitability rather than map relevance. They establish whether vulnerable software sits on assets an attacker could reach; whether the controls that should block a technique are present, enabled, and correctly configured; and whether a mitigation would hold if the technique ran today. When an active control contains an exposure, the CVE can move from the emergency cycle to the normal remediation cycle while Nagomi continues to verify the compensating control. The output is a verdict with named ownership and a defensive plan built from tools already in place, returned the same day. The integration also puts Recorded Future Identity Intelligence to work. When workforce credentials appear in a leak, Nagomi's exposure rules flag the ones that warrant attention, and agents assess business criticality, MFA coverage, and the controls that protect each account. Nagomi connects to a customer's existing security tools by API with no software to deploy on endpoints, and is built on Automated Security Control Assessment, which confirms whether the controls an organization already owns are running and effective on each asset rather than simply deployed. Every verdict traces back to the customer's own tools, so conclusions can be audited rather than accepted. The resulting documentation names the asset, control, configuration, and technique. Actions that change state in a customer environment follow the customer's configured approval path and produce evidence at each step, and Nagomi validates each fix for a defined period after closure. "Intelligence was never the bottleneck. Hands were," said Emanuel Salmona, co-founder and CEO of Nagomi Security. "Recorded Future tells our customers what is coming before it arrives. Agentic Exposure Ops turns that head start into exposure they have actually eliminated." About Nagomi Nagomi Security is the pioneer of Agentic Exposure Operations, an AI-native system that moves enterprise security teams from exposure overload to autonomous control. Nagomi restores balance by replacing reactive exposure management with an agentic operation that understands the environment, closes risk, and verifies resilience at scale. Its AI Exposure Eliminators connect to the tools an organization already owns. They run a continuous cycle of discovery, investigation, neutralization, and validation, so every real exposure path closes at the root instead of aging in a queue. Fortune 500 organizations across banking, manufacturing, healthcare, energy, and software rely on Nagomi to cut exposure noise down to the pathways that matter and to prove, continuously, that their controls work. Learn more at https://nagomisecurity.com. Legal Disclaimer: EIN Presswire provides this news content "as is" without warranty of any kind. Today in New York do not accept any responsibility or liability for the accuracy, content, images, videos, licenses, completeness, legality, or reliability of the information contained in this article. If you have any complaints or copyright issues related to this article, kindly contact the author above.

TechNadu
Oct 5th, 2026
Cyber job moves extend from operational responsibilities to boardroom leadership | week of October 4 - 10.

Cyber job moves extend from operational responsibilities to boardroom leadership | week of October 4 - 10. Published 2 hours ago Cybersecurity Staff Editor Tim Franks, CISSP - Daikin Comfort Tim Franks, CISSP took on the position of Sr. Director Cybersecurity at Daikin Comfort in September 2026. Franks most recently served as Sr. Manager - Infrastructure Cybersecurity at United Airlines for more than three years. He previously worked as Director of Threat and Vulnerability Management at iconectiv and Sr. IT Security Manager at Komatsu Mining. Franks also spent more than nine years at United Airlines in earlier cybersecurity leadership positions, including Director - Cyber Security Visibility and Analysis and Director, Platform and Security Operations. (source) Jenny Ngo - Recorded Future Jenny Ngo was promoted to Sales Team Lead - SG/PH/TW at Recorded Future in September 2026. Ngo most recently held the position of Team Lead - PubSec - SG/PH at the company after more than two years in Public Sector Sales (SG/BN/PH). She previously spent more than three years as Country Manager - Singapore at Infoblox and nearly five years as Sales Manager (Singapore) at Forcepoint. Ngo also held business development roles at Netpoleon Solutions before working as Global Account Manager at SingTel. (source) Tatiane Moore - Fifth Third Bank Tatiane Moore accepted the position of VP, Director Security Enginering at Fifth Third Bank in September 2026. Moore most recently served as Vice President Cloud and Application Attack Surface Mgmt / RISO at Experian, concluding a 10-year tenure with the company. She previously spent more than five years at UnitedHealth Group, serving as Director, IT Portfolio Management after working as IT Project Management Office (PMO) Manager. Moore also worked as a Consultant in Service Management and Program Management at Pacific Life. (source) Maxwell Watson - depthfirst Maxwell Watson became a Member of Technical Staff at depthfirst through the acquisition of Almanax, the company he co-founded. Watson most recently served as Co-Founder & CTO of Almanax for more than two years. He previously worked as a Senior Software Engineer at Coinbase and Mount Sinai Health System after spending more than two years as a Software Engineer at Capsule8. Watson also held the position of Engineering Lead, Manager at theSkimm before moving into subsequent software engineering roles. (source) Steve Mullett - Neo Security Steve Mullett stepped into the position of VP Sales, North America at Neo Security in September 2026. Mullett most recently served as Vice President of WW Sales & GTM at SquareX, holding the position until March 2026. He previously spent four years as a Strategic Account Executive at Wiz and more than five years as Regional Sales Manager - Large Enterprise at Okta. Mullett also worked as an Enterprise Account Executive at New Relic before moving into his later cybersecurity sales positions. (source) Sergey Elk - Cyera Sergey Elk moved to Cyera as Senior Data Engineer in September 2026. Elk most recently worked as Senior Data Engineer at Gloat, where he spent just over two years. He previously held a Data Engineer position at Cymotive for four years after serving as Senior Data Engineer at Viz.ai. Elk also spent more than a year at WalkMe as a Data and Cloud Infra Engineer before moving through his subsequent data engineering positions. (source) Courtney Glubo - Cohesity Courtney Glubo was promoted to Director, Talent Acquisition (WWFO & Marketing) at Cohesity in October 2026. Glubo most recently held the position of Director, People Partner (WWFO) at the company after serving as Senior Manager, People Partner (Engineering, Product & Customer Experience). She has held several other roles at Cohesity since 2021, including Global Lead GTM Recruiter and Senior Manager, AMER GTM Recruiting. Glubo previously spent more than two years in talent acquisition at Commvault and also worked as a Recruiter at TalentBridge. (source) Joseph Mack - Zenity Joseph Mack was promoted to Account Executive at Zenity in October 2026. Mack most recently worked as Inside Sales Representative - SouthEast Enterprise at the company, a position he held for more than two years. He previously spent 10 months as an Enterprise Sales Development Representative at Ideagen. Mack also worked at Fortinet as a Business Development Representative for nearly a year and a half before moving to Ideagen and later Zenity. (source)

Runtime Revolution
Oct 1st, 2026
Recorded Future launches MCP for agentic security operations.

Recorded Future launches MCP for agentic security operations. This article was written by a language model from the source above and was not reviewed by a human before publication. Verify anything operational against the original. Editorial policy Key points * " AI agents can now make faster, more trustworthy security decisions by directly accessing Recorded Future intelligence. * " Affected systems include AI agents and LLMs like Claude, ChatGPT, Copilot, Cursor, and Gemini CLI in security workflows. * " Security teams should evaluate Recorded Future MCP to integrate trusted intelligence directly into their agentic security operations. Recorded Future unveils Model Context Protocol (MCP) for ai-driven security. Recorded Future has announced the general availability of its Model Context Protocol (MCP), a new offering designed to seamlessly connect AI agents with Recorded Future's extensive threat intelligence. This development addresses a critical need in the cybersecurity landscape, as both threat actors and security teams increasingly leverage artificial intelligence to automate and scale their operations. MCP provides a standardized, OAuth-authenticated gateway, allowing AI agents to directly pull trusted intelligence, thereby enhancing decision-making, improving reliability, and accelerating response times. The proliferation of AI-driven attacks, from automated reconnaissance to complex exploit development, necessitates a proportional response from defenders. Many security organizations are now adopting AI agents and copilots to manage their workloads. However, the effectiveness of these agents is inherently tied to the quality and trustworthiness of the intelligence they consume. As highlighted by Recorded Future, inconsistent or unreliable responses from large language models (LLMs) can introduce uncertainty and delays, underscoring the demand for a direct conduit to verified threat intelligence. Integrating AI agents with threat intelligence via MCP. Recorded Future MCP extends the company's established role as a trusted intelligence provider for human analysts directly to AI agents. It offers a catalog of over 80 tools that expose a broad set of capabilities from the Recorded Future Platform, including threat actor profiles, Recorded Future Risk Scores, ransomware metadata, malware sandbox data, and dark web intelligence. This direct access is crucial for integrating AI agents with threat intelligence efficiently. Key features and benefits of MCP include: * Direct, Standardized Access: Agents can access intelligence via OAuth authentication, ensuring secure and consistent data retrieval. * Broad Compatibility: MCP works with popular LLM clients and AI agents, including Claude, ChatGPT Enterprise, Copilot, Cursor, and Gemini CLI. * Enhanced Decision Making: By crawling the Intelligence Graph directly, agents can find related entities and context in fewer calls, reducing latency and cost while providing comprehensive situational awareness. * Write Capabilities: Agents can now write to Watch Lists and author Platform Analyst Notes, enabling a closed-loop between analysis and configuration. This capability allows agents to automatically update intelligence based on their findings, such as keeping a tech stack Watch List current as new tools are adopted. Automating security operations with Recorded Future MCP. Through a pilot program involving over 100 enterprise customers, Recorded Future identified three primary usage patterns demonstrating the power of automated security operations with Recorded Future MCP: * Automated Enrichment and Detection Engineering: Customers are replacing manual indicator of compromise (IOC) and CVE lookups with bulk enrichment directly integrated into security information and event management (SIEM) and security orchestration, automation, and response (SOAR) logic. This ensures alerts arrive pre-enriched, facilitating automated threat-actor profiling and malware analysis. * Executive and Leadership Reporting: Automated reports on threat landscapes and risk posture can be generated, transforming time-consuming manual assemblies into recurring, low-effort briefings, including compliance-driven reports for high-risk CVEs and ransomware profiles. * Incident Response and Threat Hunting Acceleration: MCP-driven triage and escalation capabilities are integrated directly into decision points, significantly shortening the path from detection to action. This allows human responders to focus on complex aspects requiring human judgment, while agents handle the initial legwork. Recommendations for leveraging agentic security. Security professionals should consider how integrating a dedicated intelligence layer like Recorded Future MCP can enhance their agentic security operations. For existing Recorded Future customers, MCP is available if your subscription includes unlimited integrations; support resources or account directors can provide assistance. Organizations not yet leveraging Recorded Future intelligence are encouraged to request a demo to understand how this protocol can provide their AI agents with the trusted context needed to make critical security decisions at machine speed and scale. Evaluating such solutions is vital for enhancing incident response with agentic AI and staying ahead of evolving threats.

Vialynx Inc
Sep 17th, 2026
Recorded Future named a Leader in External Threat Intelligence by independent research firm.

Recorded Future named a Leader in External Threat Intelligence by independent research firm. Technology · SEP 17, 2026 PR Newswire Company Received the Highest Score Possible in Twelve Criteria and Above Average Customer Feedback BOSTON, Sept. 17, 2026 /PRNewswire/ - Recorded Future,... Company Received the Highest Score Possible in Twelve Criteria and Above Average Customer Feedback BOSTON, Sept. 17, 2026 /PRNewswire/ - Recorded Future, the world's largest threat intelligence company, today announced that it has been named a Leader in The Forrester Wave(TM): External Threat Intelligence Service Providers, Q3 2026. In this evaluation, Recorded Future received above-average customer feedback and the highest possible score in 12 criteria, including Deep and Dark Web Monitoring, Roadmap, and Third-Party and Supply Chain Intelligence. Cyber, fraud, and third-party risks increasingly converge across the same infrastructure, identities, suppliers, and financial systems. Recorded Future helps organizations understand the external environment before threat activity becomes impactful. Its platform combines proprietary collection with the Intelligence Graph(R), analysis from Insikt Group(R), AI-driven analytics, and autonomous capabilities, then connects the resulting intelligence to customer workflows across Cyber Operations, Digital Risk Protection, Third-Party Risk, and Payment Fraud. "Attackers operate across domains and at machine speed. Defenders need intelligence that gives them time to act. We believe our position as a Leader reflects the trust customers place in Recorded Future to surface relevant threats early and connect them to the decisions that protect their institutions. We are expanding that work with Mastercard across cyber, fraud, and third-party risk," said Colin Mahony, Chief Executive Officer of Recorded Future. The Intelligence Graph contains more than 200 billion nodes of specialized threat data, giving human analysts and AI systems a shared view of adversaries, infrastructure, and targets. Recorded Future is building autonomous and agentic workflows that put this context to work earlier in the decision cycle, reducing manual effort while preserving human control over consequential decisions. "The next phase of threat intelligence depends on making reliable intelligence usable by both people and agents. We are building autonomous and agentic workflows on top of proprietary collection and expert analysis so customers can move from signal to investigation and action with context, provenance, and control intact," said Jamie Zajac, Chief Product Officer of Recorded Future. Recorded Future is also extending its intelligence across fraud and payments with Mastercard. It's bringing external threat intelligence into third-party and supply chain risk to help teams identify exposure deeper in their extended ecosystem and make decisions with a more complete view of external risk. Together with RiskRecon, another Mastercard company, Recorded Future brings external threat intelligence into third-party and supply chain risk, helping teams identify exposure deeper in their extended ecosystem and make decisions with a more complete view of external risk. Access a complimentary copy of the report at: Research citation The Forrester Wave(TM): External Threat Intelligence Service Providers, Q3 2026, Forrester Research, Inc., September 17, 2026. Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. This report is part of a broader collection of Forrester resources, including interactive models, frameworks, tools, data, and access to analyst guidance. For more information, read about Forrester's objectivity here. About Recorded Future Recorded Future is the world's largest threat intelligence company, serving over 1,900 businesses and government organizations across 80 countries. The Recorded Future platform provides the most complete coverage of adversaries, infrastructure, and targets through the Intelligence Graph(R), which contains over 200 billion nodes of specialized threat data. By combining precise, AI-driven analytics with breakthrough autonomous capabilities, Recorded Future enables organizations to transform from manual threat intelligence limitations to Intelligence Operations that automatically operationalize threats across entire security ecosystems. Recorded Future was acquired by Mastercard (NYSE: MA) in 2024. Headquartered in Boston with offices around the world, Recorded Future continues to lead the evolution from traditional threat intelligence to automated risk mitigation. Media contact SOURCE Recorded Future Published by News Desk · WeeklyReviewer The WeeklyReviewer news desk monitors breaking developments around the clock - sourcing, verifying, and publishing real-time industry news across business, technology, politics, science, sports, and world affairs. Every story that comes through the Live Wire is reviewed for accuracy before publication, keeping our readers ahead of the curve without the noise.