Cyber Threat Intelligence Analyst

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity

technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations.

Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

Each of us can help make the world a safer place. Join us!

ABOUT THE ROLE :

The selected candidate will be responsible for generating comprehensive cyber threat reports for both internal stakeholders and clients / partners. The reports will cover Dark web, cybercriminal and Advanced Persistent Threat (APT) activities, intrusion tactics, techniques and procedures (TTP), as well as targeted entities. The role will involve leveraging internal and external resources to investigate threats and vulnerabilities, while also analyzing different threat actors and their attack infrastructure.

TASKS TO SOLVE :

Analyzing Threat Intelligence Alerts and Reports on IOCs and TTPs.

Analyzing detected cyber threats including data breaches, DDoS, fraud, phishing, and ransomware attacks.

Craft, maintain, and document detection opportunities within the Threat Intelligence platform.

Perform necessary correlation and research to create useful, compelling, and context-rich alerts for customers.

Pursue research into current threats and industry trends to be aware of the most up-to-date threats affecting the environments under vigilance.

Drive initiatives to create detection content based on findings stemming from threat hunts and ad hoc detection opportunities.

Develop mitigation and countermeasure strategies from collected threat intelligence.

Leveraging MITRE ATT&CK categorization to align observed threat actor activity to Tactics, Techniques, and Procedures (TTPs).

APPLY FOR THIS VACANCY IF YOU HAVE THE FOLLOWING QUALIFICATIONS :

Graduated or final year student in the field of information security or information technology (or have equivalent experience).

Knowledge of network technologies and principles of functioning of data networks, understanding of the features of the most common data transfer protocols.

Knowledge of OS architecture and operating principles.

Passion for cybersecurity, learning and knowledge sharing.

Ready to work with large datasets with attention to detail.

Good interpersonal skills, as well as the ability to communicate effectively orally and in writing.

Fluency in English is highly appreciated.

WHAT ELSE WE APPRECIATE IN OUR TEAM :

Understanding of Threat Intelligence / Threat Hunting.

Understanding of security principles such as attack structures, threat landscapes, TTP of attackers, etc.

Excellent OSINT and analytical skills. Ability to recognize patterns and trends, connect the dots, and draw reasonable conclusions.

Understanding OPSEC (Operations Security) principles.

WHY CHOOSE GROUP-IB

Your happiness is important to us. We want every single team member to be happy.

Continuing professional development. At Group-IB, you can choose from various paths to growth : progress as an expert, advance to a management position, try your hand in another department, relocate abroad, or launch a new business area at Group-IB.

A team with extensive international expertise. Do you have experience but are looking for exciting challenges? By choosing us, you will be choosing complex tasks and continuously improving your skills in a fast-growing international company.

Globally recognized technologies. Group-IB's members are located in 25 countries and our products and services are sold in 60 countries. What’s more, Gartner, IDC, and Forrester have ranked our technologies among the best in their class. We work with over 450 international partners and about 500 clients.

A culture created by each of us. Group-IB’s employees speak many different languages and understand one another. We respect each other's beliefs, share common values, and strive toward the happiness of every employee.

Economic stability. Group-IB's sustainable growth helps rapidly develop careers that would take years to progress as far as most other companies.

WHAT ELSE YOU SHOULD KNOW

Flexible schedule. Group-IB does not have fixed working hours. You choose your own schedule. We adhere to the principle advocated by Steve Jobs : “We have to work not 12 hours, and head.”

Health. If anything goes wrong, don’t worry — we offer health insurance.

Certificates and training courses. Group-IB specialists hold over 1,000 professional certificates, including CEH, CISSP, OSCP, GIAC, MCFE, BSI, as well as some rare ones that would be a source of pride for experts in forensics, penetration testing, and reverse engineering worldwide. We have an incentive program that helps employees achieve certifications at the company's expense.

Challenges. A wide selection of GIB programs helps you improve soft skills, gain new competencies, and receive monetary rewards.

The initiative is rewarded. At Group-IB, you can bring your most daring ideas to life. The company encourages technical blogging, writing articles, building sports teams, and other creative activities.