Infrawatch careers
Infrawatch is building the world’s first real-time adversary infrastructure intelligence platform - turning the global internet into a live, high-fidelity map of malicious networks, proxies, and command-and-control servers before they’re ever used in attacks.
Every day, Infrawatch scans the entire public IPv4 and IPv6 space, generating over 150 million actionable indicators. Our proprietary rule engine and enrichment pipeline transform raw internet telemetry into curated, analyst-ready intelligence that powers fraud prevention, threat detection, and national-scale defence.
Existing tools are fragmented: broad but shallow, or narrow but blind. Infrawatch unifies them. We give defenders visibility and attribution across all categories of adversary infrastructure, enabling them to block threats at the infrastructure stage - not after the breach.
Our mission is simple but urgent: to be the infrastructure intelligence source of truth that keeps enterprises, governments, and critical systems ahead of adversaries.
Built by defenders, for defenders, Infrawatch delivers unmatched coverage, precision, and speed. From cybersecurity giants to government agencies, organisations rely on Infrawatch’s live data feeds, APIs, and platform to identify malicious infrastructure, prevent fraud, and accelerate investigations.
We care deeply about clarity: in data, in design, and in purpose. Our analyst-first platform makes billions of events feel effortless to explore, with modern workflows and visualizations that help teams see faster, decide smarter, and act sooner.
We’re a small, focused, and remote-first team of engineers and researchers obsessed with quality, performance, and craft. Together, we’re building the backbone of proactive defence, a system that turns chaos into signal and helps the world beat the adversary.
Every day, Infrawatch scans the entire public IPv4 and IPv6 space, generating over 150 million actionable indicators. Our proprietary rule engine and enrichment pipeline transform raw internet telemetry into curated, analyst-ready intelligence that powers fraud prevention, threat detection, and national-scale defence.
Existing tools are fragmented: broad but shallow, or narrow but blind. Infrawatch unifies them. We give defenders visibility and attribution across all categories of adversary infrastructure, enabling them to block threats at the infrastructure stage - not after the breach.
Our mission is simple but urgent: to be the infrastructure intelligence source of truth that keeps enterprises, governments, and critical systems ahead of adversaries.
Built by defenders, for defenders, Infrawatch delivers unmatched coverage, precision, and speed. From cybersecurity giants to government agencies, organisations rely on Infrawatch’s live data feeds, APIs, and platform to identify malicious infrastructure, prevent fraud, and accelerate investigations.
We care deeply about clarity: in data, in design, and in purpose. Our analyst-first platform makes billions of events feel effortless to explore, with modern workflows and visualizations that help teams see faster, decide smarter, and act sooner.
We’re a small, focused, and remote-first team of engineers and researchers obsessed with quality, performance, and craft. Together, we’re building the backbone of proactive defence, a system that turns chaos into signal and helps the world beat the adversary.
Founding Operations Associate
Onsite or remote • London • Edinburgh • Remote (United Kingdom)
Lloyd Davies
Lloyd is the Founder & Engineer behind Infrawatch. 11+ years in Cyber Threat Intelligence and malware research. Former CrowdStrike and PwC. Building large-scale systems that help defenders beat the adversary.