Group-IB

Senior Cyber Threat Intelligence Analyst - USA

United States · Senior

Sponsorship not specifiedDetected 8 days ago

PythonBashCybersecurityPenetration TestingResearchCommunicationCISSP

About the role

Group-IB Threat Intelligence is looking for a Cyber Intelligence Analyst to join our Cybercrime Research team to help us combat the cybercriminals operating in the Dark web and open sources.
The selected candidate will be responsible for covering and researching major cyber threats that pose risks to the North America region.
This individual will analyze various types of threat actors, ranging from hacktivists to Advanced Persistent Threats (APTs).

You choose your own schedule.
Craft, maintain, and document detection opportunities within the Threat Intelligence platform.
Manage information and details related to threat actors TTPs and Opsec.
Drive initiatives to create detection content based on findings stemming from threat hunts and ad hoc detection opportunities.
Develop mitigation and countermeasure strategies from collected threat intelligence.

Experience in analyzing the cybercrime community and profiling the threat actors.
Deep understanding of the dark web ecosystem, including knowledge of major platforms, types of goods and services traded, market dynamics, and communication methods used within underground communities
Basic knowledge of scripting languages (Python, Bash).
Knowledge of network technologies and principles of functioning of data networks, understanding of the features of the common data transfer protocols.
Knowledge of OS architecture and operating principles.
Good interpersonal skills, as well as the ability to communicate effectively orally and in writing.
Experience in working with the following sources: Virustotal, Urlscan, Shodan, RiskIQ, Public sandboxes
What else should you know:
A genuine passion for investigating cybercrime, not just to produce reports, but to actively combat and mitigate its impact.
Understanding and interest in the threat landscape in the North America region.
Knowledge of global and local cyber threats, including ransomware, initial access brokers, banking trojans, remote access trojans, and fraudsters.
Optionally: Group-IB or other Threat Intelligence platforms.
Authorisation to work in the US (the role is based in the US).
Flexible schedule: Group-IB does not have fixed working hours. You choose your own schedule. We adhere to the principle advocated by Steve Jobs: "We have to work not 12 hours, and head.

Group-IB specialists hold over 1,000 professional certificates, including CEH, CISSP, OSCP, GIAC, MCFE, BSI, as well as some rare ones that would be a source of pride for experts in forensics, penetration testing, and reverse engineering worldwide.
We have an incentive program that helps employees achieve certifications at the company's expense.
At Group-IB, you can bring your most daring ideas to life.
The company encourages technical blogging, writing articles, building sports teams, and other creative activities.
Perform necessary correlation and research to create useful, compelling, and context-rich alerts for customers.

This listing is sourced directly from Group-IB's careers page and normalized into a canonical job model.