OSINT Analyst

About the position

THINKPOL runs a private archive of 30 billion social posts, a large part of it content the authors or the platforms have since deleted. Our users are police units, fraud and compliance teams, and cyber threat intelligence analysts who cannot afford to miss what is no longer on the public web. We are a small French team, everything hosted in Europe.

This is our first analyst role, and it is deliberately non-engineering. Until now, the founder has handled every investigation and client demonstration single-handedly, which is the primary bottleneck on our growth. You will step in to share that workload and take ownership of those operations.

The work, plainly

Two things, every week: Client casework: before a prospect call, take that prospect's own problem, run it against the archive, and come back with real output from their sector, meaning actual accounts, actual networks, actual recovered content. Published investigations: every fortnight, one finished open-source investigation written as an intelligence note. The last one went to an international law-enforcement organisation.

• Identity resolution across handles, communities and time
• Recovery and analysis of deleted or removed content
• Network mapping: who speaks to whom, where the goods and the money move
• Writing it up as a short intelligence note an analyst can act on
• Building the demonstration pack that goes in front of a client
• No administrative tasks, no data entry, no CRM housekeeping

Who this is for

• Master's student in intelligence, international relations, security studies, criminology or data, or on an apprenticeship track
• Near-native written English. This is the one hard requirement, because everything you produce is read in New York, London and Singapore
• Steady with the ugly parts of open-source work: trafficking, extremism, fraud, counterfeit networks
• Rigorous about sourcing. A claim without a citation is not a finding
• Prior OSINT experience is welcome, not required. We can teach the tools, we cannot teach judgement

Terms

• Open now: four to six months, as an apprenticeship straight away or an internship from January, timed to your school calendar
• Fully remote, with the remote arrangement written into the convention
• French convention de stage or apprenticeship contract, countersigned by your school
• Paid at the French statutory internship/apprenticeship rate

How to apply

Send a CV and a one-page analytical note in English on any subject of your choosing. The note counts for more than the CV. Applications are read by the founder and every applicant gets an answer.