Open-source intelligence has become a popular subject, and much of what is written about it online focuses on tools and dramatic finds. The reality of the profession is quieter. It is careful reading, honest documentation and the discipline to report only what you can prove.
A skill more often than a job title
Very few people hold the job title "OSINT investigator". Far more use open-source research every day inside another role. That is how most of our own staff learned it, and it is still the most reliable route in. The skill travels well between careers, and a background in one of them gives you something a course cannot: an understanding of the questions that matter in that field.
Where our investigators come from
| Background | What it teaches |
|---|---|
| Investigative and verification journalism | Source evaluation, records research, writing for a skeptical reader |
| Law enforcement and prosecution support | Evidence handling, disclosure and the standards courts apply |
| Financial crime, anti-money laundering and compliance | Ownership structures, typologies and reading financial records |
| Cyber threat intelligence | Infrastructure research, threat actor tracking and technical pivots |
| Licensed investigation, tracing and recovery | Locating people and assets lawfully, and the limits of what is permitted |
| Trust and safety, and brand protection | Coordinated abuse, counterfeit networks and platform enforcement |
| Research, academia and area studies | Languages, regional expertise and structured reasoning |
Some of our best analysts started in recruiting, real estate research or corporate security, where finding and checking information about people and businesses is part of the daily work even if nobody calls it intelligence.
What we look for
- Curiosity with discipline. The urge to keep pulling a thread, and the judgment to stop when the question has been answered or the next step would not be proportionate.
- Skepticism, including of yourself. The habit of asking what else would explain the evidence, especially when the answer is the one you hoped for.
- Patience with primary sources. A willingness to read the scanned filing, the court docket and the microfilmed newspaper rather than the summary.
- Clear writing. A finding nobody can follow is a finding nobody can use. We test writing at every stage of selection.
- Integrity under pressure. Clients sometimes want a particular answer. Investigators must be comfortable telling them the evidence says otherwise.
Tools matter less than people expect. We explain why in Tools are not tradecraft.
The investigative habit
Every case we run, whatever the subject, follows the same habit. It is worth practicing until it is automatic.
- Define the objective. Write down the question, what a decisive answer would look like and why it matters.
- Identify the sources. Decide which kinds of record could answer it: platforms, registries, courts, archives, imagery or infrastructure.
- Choose methods, then tools. Pick the techniques the sources require, then the tools that support them.
- Search deliberately. Build queries in steps, across several engines and in the relevant languages, and log them.
- Preserve as you go. Capture what you rely on, with its source and time, before you analyze it.
- Verify and corroborate. No single source carries a conclusion. Look for independent confirmation and for evidence against your theory.
- Document and report. Write notes that would let someone else repeat your steps, and a report that states confidence plainly.
Practicing lawfully
The difficulty for newcomers is that the obvious way to practice, researching real people, is often inappropriate. Our advice:
- Start with yourself. You are the one subject you may research without limit. Most people are surprised by what they find, and the exercise teaches every core technique.
- Use public-interest challenges. Geolocation and verification exercises built from public events, and community investigations run by established organizations with ethical guidelines, are excellent practice.
- Research organizations, not private individuals. Companies, public bodies and published events offer rich records without intruding on anyone's private life.
- Write it up. A short, well-sourced write-up of a public-interest question is a better portfolio piece than any certificate.
What to avoid
Some activities promoted online as OSINT experience will count against an applicant here, and some are unlawful.
- Building fake accounts to deceive people, befriend them or join closed groups under false pretenses. Our research personas only observe. Accounts built to deceive are not tradecraft.
- Buying, selling or searching stolen data, credentials or aged accounts.
- Tracking links and other tricks that collect information from people without their knowledge.
- Researching ex-partners, colleagues or strangers for curiosity, and publishing what you find about private people.
- Bounty hunting for criminals by engaging with them online. Leave that to the authorities.
Background checks are part of the job
Investigators handle sensitive information and their work often ends up in court. Like most firms in this field, we require a background check before employment, and serious offenses, particularly those involving dishonesty or unauthorized access, are generally incompatible with the work. A candidate's own lawful conduct online is part of their record too. It is worth thinking about now.
Next steps
If you are already working in one of the fields above, look for the open-source questions inside your current role and practice answering them to an evidential standard. If you are ready to apply, our careers page describes our selection process, including the work-sample exercise, and our current recruiting priorities. Our training courses are open to professionals who want to build the method inside their own organizations.