Full-Time

Senior Lead Threat Analyst

Black Lotus Labs

Posted on 8/17/2026

CenturyLink

CenturyLink

10,001+ employees

Global telecommunications and IT services provider

Compensation Overview

$132.2k - $193.9k/yr

+ Bonus structure

No H1B Sponsorship

Washington, DC, USA + 2 more

More locations: Virginia, USA | Maryland, USA

Hybrid

Remote role with office visits in Herndon, Virginia approximately twice per month.

US Top Secret Clearance Required

Category
IT & Security (1)
Required Skills
LLM
Malware Analysis
Python
Grafana
Airflow
Apache Spark
SQL
Machine Learning
Apache Kafka
Computer Networking
Docker
Elasticsearch
Redis
Hadoop
Linux/Unix

Get referred to CenturyLink

See people who can refer or advise you

Requirements
  • Effectively communicate complex domain-specific concepts clearly to technical and non-technical audiences.
  • Apply knowledge of adversary capabilities, infrastructure, and techniques to discover, track, and defend against threats to customer networks.
  • Use open-source intelligence methods for investigations, including discovering novel threats in malware repositories.
  • Have scripting experience with Python and familiarity with distributed computing.
  • Have extensive experience hunting threat actors and developing algorithms and techniques to identify new threats from large data sets.
  • Have deep knowledge of network-based threats and identifying behaviors without attack payloads.
  • Demonstrate strong analytical thinking and the ability to quickly learn new methods, tools, and programming languages.
  • Have user-level experience in a Unix-based environment.
  • Extract data through SQL.
  • Demonstrate strong writing skills for sharing knowledge publicly.
  • Demonstrate knowledge of cybersecurity concepts, network protocols, firewalls, intrusion detection and prevention systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor tactics, techniques, and procedures, application security concepts, and cloud security fundamentals.
  • Rapidly develop proficiency in unfamiliar technical domains through foundational analytical skills, self-directed learning, and effective use of AI-assisted research and problem-solving tools.
  • Use AI-enabled tools responsibly to augment technical research, analysis, coding, documentation, and report development while maintaining professional skepticism and analytical rigor.
  • Evaluate, challenge, and validate AI-generated outputs before using them in customer-facing analysis, findings, or recommendations.
  • Hold an active Top Secret/Sensitive Compartmented Information security clearance with Counterintelligence Polygraph.
Responsibilities
  • Research current threat actor tools, techniques, and procedures to automate detection.
  • Work with cyber operators on in-depth investigations of cyber threat activity and provide mitigation guidance.
  • Automate investigations through Python scripting and data analysis using visualization in Jupyter Notebooks and Grafana.
  • Build and maintain trust relationships with intelligence teams, law enforcement, and other external groups.
  • Support customer requests for information on incidents and emerging threats.
  • Use approved AI-enabled tools to accelerate research, coding, data exploration, documentation, and knowledge discovery while independently validating outputs.
  • Develop repeatable workflows combining analyst expertise, automation, and AI-assisted capabilities to improve investigative efficiency and analytical quality.
Desired Qualifications
  • Previous work experience with the Department of Defense, Intelligence Community, or other government agencies such as the Department of Homeland Security, Department of Energy, or Department of Veterans Affairs.
  • Experience with Spark and distributed computing.
  • Experience developing automation and analysis in Python-based environments.
  • Ability to provide direction and assist others in learning new topics.
  • Experience with generative artificial intelligence, AI-assisted coding, retrieval-augmented analysis, or agent-based workflows in cyber research, threat hunting, or intelligence production.
  • Proficiency in analyzing NetFlow data to identify unusual patterns and potential security threats.
  • Interest in conducting trend analysis to uncover patterns and emerging threats for proactive defense strategies.
  • Ability to responsibly leverage AI-enabled tools in a regulated or mission-focused environment while maintaining data protection requirements, analytical integrity, and human accountability for findings and recommendations.

CenturyLink, now known as Lumen Technologies, provides telecommunications and IT services for businesses and government. It offers voice communications and network services such as VoIP, SIP Trunking, hosted VoIP, SD-WAN, MPLS, and IPVPN, along with cloud and IT solutions like Big Data as a Service, IoT, and cloud management across hybrid, private, and public clouds. It differentiates itself by offering a broad, integrated portfolio that combines traditional communications with modern network and cloud services at scale, backed by global data centers and infrastructure. Its goal is to help customers communicate, connect, and digitally transform through secure, scalable, and manageable network and cloud solutions.

Company Size

10,001+

Company Stage

IPO

Headquarters

Monroe, Louisiana

Founded

1930

Get referred to CenturyLink

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • February 2026 investor day outlined 58 million fiber miles by 2031.
  • Q2 2026 showed $91 million PCF revenue and 2,000-plus NaaS customers.
  • May 2026 refinancing pushed maturities longer, buying time for AI-network monetization.

What critics are saying

  • February 2026 sold Quantum Fiber to AT&T, shrinking consumer cash flow and cross-sell.
  • July 2026 layoffs in commercial teams show another cost reset and channel disruption.
  • FCC scrutiny over the June 2026 copper-theft outage and late reporting signals recurring compliance risk.

What makes CenturyLink unique

  • Lumen’s February 2026 PCF strategy gives it rare AI-era backbone scale.
  • July 7, 2026 Alkira acquisition adds cloud-native control across multi-cloud and AI workloads.
  • The February 2026 Multi-Cloud Gateway turns legacy fiber into programmable enterprise routing.

Help us improve and share your feedback! Did you find this helpful?

Benefits

Health Insurance

Life Insurance

Remote Work Options

Flexible Work Hours

Performance Bonus

Growth & Insights and Company News

Headcount

6 month growth

-10%

1 year growth

-10%

2 year growth

-10%
Law360
Jun 9th, 2026
CenturyLink waited 1 year to report copper theft outage.

CenturyLink waited 1 year to report copper theft outage. By Nadia Dreid ( June 8, 2026, 8:15 PM EDT) - CenturyLink might be in hot water with the Federal Communications Commission after taking more than a year to file the requisite paperwork with the agency following an outage in Washington state caused by copper theft... Law360 is on it, so you are, too. A Law360 subscription puts you at the center of fast-moving legal issues, trends and developments so you can act with speed and confidence. Over 200 articles are published daily across more than 60 topics, industries, practice areas and jurisdictions. A Law360 subscription includes features such as * Daily newsletters * Expert analysis * Mobile app * Advanced search * Judge information * Real-time alerts * 450K+ searchable archived articles Experience Law360 today with a free 7-day trial. Attached documents. Related sections. Companies. Government agencies. This past year, 10 lawyers across the country at plaintiffs' firms big and small helped secure millions of dollars in settlements and verdicts for their clients, going up against powerful defendants like Google, Monsanto and the Trump administration, earning the attorneys recognition as Law360's Titans of the Plaintiffs Bar for 2026.

Konecteaze
Jun 1st, 2026
Cox Business internet review 2026: plans & pricing.

Cox Business internet review 2026: plans & pricing. Cox Business internet reviewed for 2026 - plans, real pricing notes, speeds, contracts, and how it stacks up against Spectrum, AT&T, and CenturyLink. By Pablo Mendoza Quick answer: Cox Business is the right call for storefronts and small offices inside Cox's 18-state footprint that want locally built cable infrastructure and a path to fiber - Cox's network tops out at 2 Gbps on its live listings, with fiber-to-the-home available in select areas under the Cox Fiber brand. The caveat, as of June 2026: Cox Business pricing is quote-based rather than published, and Cox's residential listings ($55/mo for 300 Mbps) start $25/mo above Spectrum's entry tier. If you're outside a Cox market or fiber matters more than footprint, CenturyLink's Quantum Fiber and AT&T are the alternatives to price first. How KonectEaze evaluate providers: Plan and pricing details verified against KonectEaze's live Cox provider listings on June 9, 2026; business-tier quotes vary by address and are labeled accordingly. See its full methodology. Cox Business at a glance. Best for: storefronts, professional offices, and franchises in Cox's core markets - Arizona, Virginia, Louisiana, Oklahoma, Kansas, Arkansas, and parts of California, Connecticut, and Georgia. * Deep local infrastructure: Cox concentrates investment in its 18 states rather than spreading thin nationally * Fiber option (Cox Fiber) with symmetrical gigabit in select areas * 2 Gbps top tier on the cable network, with 100 Mbps upload at that tier * Panoramic WiFi for whole-location coverage; local retail stores for in-person support * Business pricing is quote-only - no published rates to comparison-shop against * Entry pricing runs high: $55/mo for 300 Mbps residential as of June 2026, versus $30/mo entry at Spectrum * Upload on cable tiers (10-35 Mbps below the top tier) trails fiber competitors badly * 18-state footprint means many readers simply can't get it Verdict: 3.5/5 for business use. Strong where it operates, priced like it knows it. Cox Business plans and pricing. What Cox lists publicly vs what's quote-only. Here's the part most reviews fudge: Cox does not publish flat business-internet pricing the way it publishes residential rates. Business quotes vary by address, term length, and add-ons like static IPs. Any article showing you a tidy "Cox Business: $X/mo" table is either printing a stale promo or a regional rate that won't survive contact with your address. KonectEaze confirmed on Cox's own business site (June 10, 2026) that no flat business-internet rates are published - it's call-for-quote. What KonectEaze can verify is Cox's live plan structure on its own provider page, which shows the network's real speed tiers and price ladder. These are residential listings - treat them as the floor for what an equivalent business-grade quote will come in above: | Plan (residential listing) | Download | Upload | Price (June 2026) | Contract | | Cox Fast 300 Mbps | 300 Mbps | 10 Mbps | $55.00/mo | Varies by plan | | Cox Go Even Faster 500 | 1 Gbps | 35 Mbps | $80.00/mo | Varies by plan | | Cox Go Super Fast 1 Gbps | 1 Gbps | 35 Mbps | $95.00/mo | Varies by plan | | Cox Go Beyond Fast (2 Gbps) | 2 Gbps | 100 Mbps | $115.00/mo | Varies by plan | Business tiers layered on top of this network add static IP options, business-grade support, and SLA-backed products - all custom quote. Run your address on its Cox page to start that conversation with real numbers. Fees, contracts, and price-after-promo. Cox typically offers both month-to-month and 12-24 month agreement options; the exact terms surface at checkout for your specific plan. Two questions to ask on any Cox Business quote before signing: what does the rate become after the promotional term, and what's the early termination fee on the agreement length you're choosing? Quote-based pricing cuts both ways - it lets a good negotiator do well, and it lets a rushed signer do badly. Speeds and reliability. Cox's network is hybrid fiber-coaxial with advanced DOCSIS on the higher tiers, which is why a cable plant can list 2 Gbps down. The structural weakness is upload: 10 Mbps on the 300 Mbps tier and 35 Mbps through the gigabit tiers, per its June 2026 listings. For a retail counter running card transactions, that's irrelevant. For an office uploading video files or living in cloud backups, it's the spec that should drive your decision - and the reason to ask whether Cox Fiber reaches your address, since the fiber product delivers symmetrical gigabit where built. Reliability-wise, Cox benefits from its concentrated-market strategy: it invests deeply in the metros it serves rather than stretching across 40 states. Outages happen on any cable network; a business that loses revenue when the connection drops should budget for a wireless failover line regardless of provider. Cox Business vs the alternatives. Cox vs CenturyLink. This is the matchup that matters in much of Cox's footprint, and it's a genuine contrast: cable scale versus symmetrical fiber. CenturyLink's Quantum Fiber listings run $50/mo for 500 Mbps symmetrical up to $155/mo for 8 Gbps symmetrical as of June 2026 - so at roughly Cox's 300 Mbps price point, CenturyLink lists more download and fifty times the upload. Cox answers with broader availability within its markets and bundling. Where both serve your address, see the full CenturyLink vs Cox comparison. Cox vs Spectrum business. Cable versus cable, and the price gap is the story: Spectrum's listings start at $30/mo (100 Mbps) and hit 1 Gbps at $60/mo, versus Cox's $55 entry and $95 gig tier as of June 2026. Spectrum also runs no annual contracts on residential plans with no data caps. Cox's counterargument is its top tier (2 Gbps with 100 Mbps up beats Spectrum's 35 Mbps up at 1 Gig) and its local-market depth. The two rarely overlap at the same address, but if you're choosing between markets or have both, its Cox vs Spectrum breakdown runs the numbers. Cox vs AT&T. Where AT&T Fiber overlaps a Cox market, fiber wins the spec sheet: under the fiber lineup AT&T refreshed on June 7, 2026, AT&T Fiber 300 runs 300 Mbps symmetrical at $60/mo - $50/mo with AutoPay and paperless billing, which undercuts Cox's $55 300 Mbps tier and its 10 Mbps upload - and AT&T Fiber 1 Gig runs 1 Gbps symmetrical at $90/mo ($80/mo with AutoPay) as of June 10, 2026 (residential listings in both cases; AT&T's 12-month new-customer promos run lower still, and equipment is included with no annual contract). Cox's case is availability: AT&T's fiber map is street-by-street, and its DSL fallback isn't business-grade. Check which one actually reaches your suite before debating specs. Where Cox Business is available. Cox's deepest markets are worth knowing by name. Phoenix is one of its flagship metros - Arizona is a core Cox state, and much of the valley has Cox as its strongest cable option. New Orleans anchors its Louisiana operation, and San Diego leads its California presence. If your business is in one of those metros, Cox is almost certainly on your shortlist by default; the question is whether fiber competition at your specific address changes the answer. Sign up if you're in a Cox market, you want infrastructure from a provider that invests locally, and your bandwidth need is download-heavy - retail, hospitality, professional services. Get the quote, ask the after-promo and ETF questions, and ask specifically whether Cox Fiber reaches you. Look elsewhere if your work is upload-heavy and a fiber competitor serves your address (CenturyLink or AT&T will beat cable upload at a comparable price), or if you're price-anchored and Spectrum is an option. And if Cox can't serve your location at all, its Cox page availability check will show you who can. Faq. Does Cox have fiber internet? Yes - Cox Fiber, in select areas, with symmetrical gigabit. The core network is hybrid fiber-coaxial cable. Is Cox available in my area? Cox covers 18 states and roughly 1,540 ZIP codes, concentrated in Arizona, Virginia, Louisiana, Oklahoma, Kansas, and Arkansas. Confirm by address on its Cox page. How much is Cox internet? Residential listings run $55/mo (300 Mbps) to $115/mo (2 Gbps) as of June 2026. Business tiers are quote-based by address. Who owns Cox Communications? Cox Enterprises - a privately held company, making Cox one of the largest privately held cable operators in the US. Is Cox internet down? Cox outages are metro-level events, not national ones. Check the Cox app's outage map, power-cycle your gateway, and - if you're a business - keep a wireless failover line. What is a good internet speed for a business? 300 Mbps for a solo office, 500 Mbps-1 Gbps for a storefront, gigabit with strong upload for a 10+ seat office. On Cox, upload is the spec to scrutinize. Check Cox availability at your business address on its Cox provider page - and if Cox doesn't serve you, the same check shows who does. Prices verified against KonectEaze provider listings June 9, 2026; final pricing varies by address, promo, and installation fees. Check internet providers at your address. Use your ZIP code to move from research to real local plans.

Business Wire
Apr 2nd, 2024
1Stwest Ma Names Bryan Taylor As A New Managing Director

EVERGREEN, Colo.--(BUSINESS WIRE)--1stWest Mergers and Acquisitions announced today that it has named Bryan Taylor as a new Managing Director. Bryan will focus on Telecom, Cloud Technology, Cybersecurity, IT Services, and AI, sectors where Bryan has 25 years of experience as an accomplished deal execution leader in buy and sell transactions.Previously, Bryan worked as a financial analyst for Century Telephone Enterprises (a.k.a. CenturyLink and Lumen). After an initial six years mastering the telecom sector, Bryan joined CenturyLink’s M&A team to facilitate carve-out acquisitions of access lines. Over 22 years on CenturyLink’s M&A team, Bryan participated in acquisitions and divestitures with more than $80 billion in deal value, during which Bryan led the transformative acquisitions of Qwest and Embarq. Moving into data centers and managed services, Bryan led the acquisition of Savvis

Business Wire
Apr 2nd, 2024
1Stwest Ma Names Derek Koecher As A New Senior Advisor

EVERGREEN, Colo.--(BUSINESS WIRE)--1stWest Mergers and Acquisitions announced today that it has named Derek Koecher as a new Senior Advisor. Derek will bring his decades of M&A expertise to help guide 1stWest M&A’s clients through complex carve-outs, buy and sell transactions, growth strategies, and negotiation of transaction compensation for founders and executive teams.With a distinguished background in leadership roles at Fortune 100 companies such as Verizon (NYSE:VZ) and CenturyLink, Derek has facilitated over $100 billion in deal value across a wide spectrum of transactions. His journey began as a risk manager for a startup wireless communications company, before he advanced to pivotal roles in international telecom. Among his accomplishments, Derek played a key role in raising the largest VC-backed deal in Latin America as well as transformative acquisitions, including the sale of CenturyLink data centers, carveouts in towers, SaaS providers, and cyber security. Derek's recent focus on AI, Language Model (LM), mobility, fiber, and SaaS springs from his deep-rooted understanding of media, technology, and telecom.“Derek is among the most sought-after advisors for transactions in the hottest M&A sectors today, from telecom and SaaS to AI,” said Ted Rieple, 1stWest M&A’s Managing Partner. “Derek brings a sterling reputation to our firm, earned from his decades of service to many of the most well-known corporations in North American

Questex
Jan 24th, 2024
Rayburn: CDN spotlight - Qwilt and Cirion partner on LATAM CDN coverage, Lumen shuts down CDN

In 2017, Level 3 was acquired by CenturyLink, and in 2020, CenturyLink changed its name to Lumen.