Lead Takedown Analyst

ChainPatrol

ChainPatrol

IT

Posted on Apr 28, 2026

Lead Takedown Analyst

Job Type: Remote

About ChainPatrol

ChainPatrol is a cybersecurity company focused on protecting brands and users from digital threats. We specialize in detecting and taking down phishing campaigns, impersonation attacks, scam infrastructure, and coordinated threat actor networks across domains, social media, and messaging platforms.
Our platform combines threat intelligence, automation, and human-led investigations to proactively identify and disrupt malicious activity at scale.

Role Overview

We are looking for a Lead Takedown Analyst to drive and scale our global takedown operations across multiple abuse vectors. This role requires deep expertise in abuse reporting frameworks, policy understanding, and operational execution across domains, hosting providers, social platforms, and beyond.
You will be responsible for ensuring high-quality, fast, and compliant takedowns while continuously improving processes and automation.

Key Responsibilities

Execute and oversee takedowns across domains, URLs, hosting providers, social media platforms, ads, marketplaces, apps, and email-based abuse
Handle C2 (Command & Control) infrastructure takedowns and malicious campaign disruption
Work with registrars, hosting providers, and platforms to ensure effective abuse enforcement
Interpret and apply ICANN DNS Abuse policies, platform Terms of Service, and legal frameworks
Support takedowns based on Trademark and Copyright violations
Contribute to takedown strategies for emerging vectors (e.g., phone numbers, messaging abuse) (plus)
Build and optimize standardized takedown workflows and processes
Collaborate with Threat Hunting, Product, and Engineering teams to improve automation and reduce manual effort
Able to Conduct quality audits of takedown operations and identify gaps for improvement
Provide guidance on best practices, escalation paths, and platform-specific nuances
Track performance metrics such as takedown success rate, turnaround time, and accuracy

Requirements

Strong experience in abuse handling / takedown operations / trust & safety
Hands-on experience with domain registrars, hosting providers, and social media reporting mechanisms
Solid understanding of ICANN DNS Abuse policies and ecosystem
Familiarity with platform Terms of Service and enforcement workflows
Working knowledge of Trademark and Copyright enforcement
Experience in handling C2 infrastructure takedowns
Strong process-oriented mindset with focus on accuracy and scalability
Ability to collaborate cross-functionally with technical and non-technical teams
Strong analytical and documentation skills

Work Environment

24/7 SOC environment – flexibility to work in shifts is required
Apply Here: