threat intelligence analyst

Capgemini

<div><div><div><div><h2 class="jobSectionHeader"><b>Your role
</b></h2></div><div><ul><li>We're hiring for skilled and motivated <b>Threat Intelligence analyst </b>across <b>PAN India </b>to join our team. The ideal candidate will have <b>4 to 6 years </b>hands-on experience with <b>Threat Intelligence, Cyber kill chain.
</b></li><li>Willing to take lead in all the Operational aspects of TI
</li><li>Capabilities to drive customer meetings and resolve various issues within the delivery process
</li><li>Monitoring of Security tool events and take appropriate actions across network infrastructure.
</li><li>Maintain awareness of latest cybersecurity adversaries, exploits, vulnerabilities, breaches, global events, and mitigation strategies.
</li><li>Maintain an understanding of the overall threat landscape (cyber, malware, botnets, phishing, DDoS, physical).
</li><li>Collect, analyze, investigate, store, and disseminate indicators of compromise (IOCs), threat intelligence.
</li><li>Create content and produce intelligence reports and deliverables using a variety of internal and external sources for various teams.
</li><li>Conduct research on cyber campaigns, adversary tracking, or TTP detections in order to offer insights to the rest of the team and the cyber intelligence community.
</li><li>Additional Remarks for Consideration:
</li>Good to have CEH, CHFI certification/training or any other cyber security certifications&quot;<br>
<li>
</li></ul></div></div><p></p><div><div><h2 class="jobSectionHeader"><b>Your profile
</b></h2></div><div><ul><li>Good to have Cyber Threat Intelligence hands-on experience.
</li><li>Well versed with Cyber Threat Intelligence Life-Cycle &amp; Phases of Cyber kill Chain
</li><li>Conduct research on cyber campaigns, adversary tracking, or TTP detections in order to offer insights to the rest of the team and the cyber intelligence community.
</li><li>Good Understanding of Mitre Framework.=
</li><li>Understanding of APT actors.
</li><li>Good working knowledge of: server platforms (UNIX, Windows etc.), networking, security (Firewalls, IDS/IPS, proxy systems etc.)
</li><li>Operational understanding of TCP/IP and computer networking. Knowledge of the functions of security technologies such as IPS/IDS, Firewalls, Security Information and Event Management tools, etc.
</li><li>Knowledge of IT security best practices, common attack types and detection / prevention methods.
</li><li>IntSights / Recorded Future / Anomali (ThreatStream) / ThreatConnect / Mandiant Advantage/ Flare/ OCT.
</li><li>Scripting and programming Skills with proficiency in one or more of the following: PowerShell, Pearl, Python.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>What you'll love about working here
</b></h2></div><div><ul><li>You can shape your career with us. We offer a range of career paths and internal opportunities within Capgemini group. You will also get personalized career guidance from our leaders.
</li><li>You will get comprehensive wellness benefits including health checks, telemedicine, insurance with top-ups, elder care, partner coverage or new parent support via flexible work.
</li><li>At Capgemini, you can work on cutting-edge projects in tech and engineering with industry leaders or create solutions to overcome societal and environmental challenges.</li></ul></div></div></div></div>

Threat Intelligence analyst

DTS Solution

Role and Responsibilities 
 
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Work as a Cyber Threat Intel Analyst in DTS Solution   HawkEye CSOC cyber command center.<br> </li>
 <li>
<i> </i> 
 Analyze and research known indicators, correlate events, identify malicious activity, and discover new sources to provide early warning related to a variety of Cyber threats.<br> </li>
 <li>
<i> </i> 
 Monitor Open Source information feeds and threat actor activity to identify activity levels and indicators for Cyber threats and Cyber-attacks.<br> </li>
 <li>
<i> </i> 
 Identify Open Source Intelligence (OSINT) threats relevant to the DTS Solution - HawkEye CSOC customer s environment and develop relevant reports.<br> </li>
 <li>
<i> </i> 
 Provide daily (business day) collections, reviews, analysis and filtering of Open Source Intelligence (OSINT) and SOCMINT (Social Media Intelligence)<br> </li>
 <li>
<i> </i> 
 Identify and investigate malicious actors with the interest and capability to target client and its infrastructure.<br> </li>
 <li>
<i> </i> 
 Develop and provide a Cyber Threat Intelligence Report, Monthly Report and Quarterly Report and an Annual Report.<br> </li>
 <li>
<i> </i> 
 Reviews all current threat intelligence feeds in use, categorizes and prioritizes by relevancy.<br> </li>
 <li>
<i> </i> 
 Provide proactive APT hunting, incident response support, and advanced analytic capabilities.<br> </li>
 <li>
<i> </i> 
 Analyze threat information reports and intelligence summaries, trends, gaps, and methods of operation.<br> </li>
 <li>
<i> </i> 
 Review audit logs and identify any unusual or suspect behavior.<br> </li>
 <li>
<i> </i> 
 Initiates ad-hoc threat intelligence work parcel assignments for Tier I/II analysts and reviews/expands the SOC daily recurring activity SOP s.<br> </li>
 <li>
<i> </i> 
 Develops reports that can be sent for awareness to various groups and levels of leadership.<br> </li>
 <li>
<i> </i> 
 Engage constructively in cross-functional projects designed to improve DTS Solution - HawkEye CSOC and its customers  security postures.<br> </li>
 <li>
<i> </i> 
 Understanding of geo-political dynamics and how they affect the wider cyber threat landscape.<br> </li>
 <li>
<i> </i> 
 Experience using Cyber Kill Chain.<br> </li>
 <li>
<i> </i> 
 Expertise on in using Threat Intelligence Platforms (Recorded Future, Flashpoint, Blueliv, Anomali, ThreatIQ etc.)<br> </li>
 <li>
<i> </i> 
 Expertise in using Digital Risk Management platforms that looks for dark web activities, breaches,<br> </li>
 <li>
<i> </i> 
 Have a curated list of important threat intel fusion across various sources<br> </li>
 <li>
<i> </i> 
 Knowledge on dark web and accessing dark web forums, IRCs, chat groups etc.<br> </li>
 <li>
<i> </i> 
 Knowledge on APT groups and monitoring all activities through handlers<br> </li>
 <li>
<i> </i> 
 Curate newsletter and social media weekly posts based on weekly activities in the cyberspace.<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Qualifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 4+ years of experience on extract and disseminate open source intelligence (OSINT)<br> </li>
 <li>
<i> </i> 
 Regional expertise as applied to threat actors<br> </li>
 <li>
<i> </i> 
 Familiarity with alternative analysis techniques and predictive analysis methodology<br> </li>
 <li>
<i> </i> 
 Experience with conducting intelligence investigations and familiarity with investigative tools, including Maltego, DomainTools, and VirusTotal<br> </li>
 <li>
<i> </i> 
 Familiarity with Threat Rating Methodology<br> </li>
 <li>
<i> </i> 
 Experience using Threat Intelligence Platforms (TIPs)<br> </li>
 <li>
<i> </i> 
 Active memberships with associations across the security and intelligence community<br> </li>
 </ul>
 </div>
 </div>
 <div>
 <div>
 <div>
</div>
 </div>
 </div>
 <div>
 <div>
 Certifications </div>
 </div>
 <div>
 <div>
 <ul>
 <li>
<i> </i> 
 Certified Ethical Hacker (CEH)<br> </li>
 <li>
<i> </i> 
 SANS Certified Intrusion Analyst (GCIA)<br> </li>
 <li><br></li></ul></div></div><div><div><div><div><div><div><div> </div>
 </div>
 <div>
 <div>
 <div></div></div></div></div></div></div></div></div>

Cyber Threat Intelligence Analyst

T. Rowe Price

<div><div><div>At T. Rowe Price, we identify and actively invest in opportunities to help people thrive in an evolving world. As a premier global asset management organization with more than 85 years of experience, we provide investment solutions and a broad range of equity, fixed income, and multi-asset capabilities to individuals, advisors, institutions, and retirement plan sponsors. We take an active, independent approach to investing, offering our dynamic perspective and meaningful partnership so our clients can feel more confident.</div></div><div></div><div><div>
We believe doing the right thing for our clients and our associates is good business. With a career at the firm, you can expect opportunities to create real impact at work and in your community. You&rsquo;ll enjoy resources to support your career path, as well as compensation, benefits, and flexibility to enrich your life. Here, you&rsquo;ll find a collaborative culture that respects and values differences and colleagues who share a spirit of generosity.</div></div><div></div><div><div>
Join us for the opportunity to grow and make a difference in ways that matter to you.</div></div><div></div><div>
Role Summary<br>
The Senior Cyber Threat Analyst &ndash; Threat Intelligence is responsible for collecting, curating, classifying, reporting, and analyzing cyber threat intelligence to support internal security operations, IT teams, enterprise risk management, and executive leadership.</div><div>
This role involves active collaboration with external partners and cyber intelligence sharing groups to both disseminate and gather intelligence on relevant cyber threats.</div><div>
The analyst will leverage intelligence data to help internal teams proactively identify, assess, and communicate potential threat actor activities that could impact the firm&rsquo;s interests.</div><div></div><div>
Responsibilities</div><ul><li>
Continuously monitor and investigate cyber-enabled threats to the firm, including activity from financially motivated and nation-state-aligned threat actors.</li><li>
Collaborate with legal, HR, insider threat, cybersecurity operations, and fraud teams by providing timely intelligence and support.</li><li>
Track and analyze threat actor tactics, techniques, and procedures (TTPs) targeting the financial services sector.</li><li>
Produce intelligence reports on adversarial attempts to compromise personnel, vendors, or information systems.</li><li>
Maintain awareness of adversarial use of contractors, front companies, and proxy personnel (e.g., DPRK or Iranian IT workers) and assist with due diligence and third-party risk assessments.</li><li>
Develop and maintain intelligence requirements, collection plans, and risk assessments aligned with the Cyber Threat Intelligence (CTI) team&rsquo;s objectives.</li></ul><div></div><div>
Business Knowledge</div><ul><li>
Able to articulate cybersecurity risks and translate them into actionable solutions for technology teams.</li><li>
Deep understanding of the goals and objectives of a cyber analysis program.</li></ul><div></div><div>
Qualifications</div><div>
Required:</div><ul><li>
5+ years of experience in cyber threat intelligence, incident response, or related cybersecurity fields.</li><li>
Experience with APT tracking, open-source intelligence (OSINT), dark web research, and threat actor attribution.</li><li>
Familiarity with nation-state adversary TTPs (e.g., PRC, Russia, Iran, DPRK) targeting financial institutions.</li><li>
Proven ability to work with cross-functional teams, including legal, compliance, HR, and IT.</li><li>
Excellent communication and analytical writing skills, with the ability to brief senior leadership clearly and effectively.</li></ul><div></div><div>
Preferred:</div><ul><li>
Experience working in a 24x7 global enterprise, ideally within the financial sector.</li><li>
Bachelor&rsquo;s degree in Cybersecurity.</li><li>
Certifications such as GCTI, GOSI, CISSP, or Security+.</li><li>
Knowledge of regulatory requirements (e.g., FFIEC, NYDFS, FINRA) related to threat intelligence and risk reporting.</li></ul><div></div><div>
FINRA Requirements</div><div>
FINRA licenses are not required and will not be supported for this role.</div><div></div><div>
Work Flexibility</div><div>
This role is eligible for hybrid work, with up to three days per week from home.</div><div></div><div>
Base Salary Ranges</div><div>
Please review the job posting for the location of this specific opportunity.</div><div></div>
$94,500.00 - $161,000.00 for the location of: Maryland, Colorado, Washington and remote workers<br>
$103,000.00 - $177,000.00 for the location of: Washington, D.C.<br>
$117,000.00 - $201,000.00 for the location of: New York, California<div></div><div>
Placement within the range provided above is based on the individual&rsquo;s relevant experience and skills for the role. Base salary is only one component of our total compensation package. Employees may be eligible for a discretionary bonus, which is determined upon company and individual performance.</div><div></div><div>
Commitment to Diversity, Equity, and Inclusion</div><div>
At T. Rowe Price, our associates are our greatest asset. We thrive because our company culture is built on inclusion and because we sustain a work environment where associates can bring their best selves to work every day. The backgrounds, talents, and experiences of our global associates allow us to embrace new ideas and perspectives that move our business priorities forward and enable us to deliver strong client outcomes. Here, you can expect equal opportunity and fair and consistent treatment for all.</div><div></div><div>
Benefits</div><div><div><div>
We value your goals and needs, at work and in life. As an associate, you&rsquo;ll be supported with resources, benefits, and work-life balance so you can thrive in ways that matter to you.</div></div><div></div><div><div><br>
Featured employee benefits to enrich your life:</div></div><div><ul><li><div>
Competitive compensation</div></li></ul></div><div><ul><li><div>
Annual bonus eligibility</div></li></ul></div><div><ul><li><div>
A generous retirement plan</div></li></ul></div><div><ul><li><div>
Hybrid work schedule</div></li></ul></div></div><div><div><ul><li><div>
Health and wellness benefits, including online therapy</div></li></ul></div><div><ul><li><div>
Paid time off for vacation, illness, medical appointments, and volunteering days</div></li></ul></div><div><ul><li><div>
Family care resources, including fertility and adoption benefits</div></li></ul></div><div></div><div><div><div><br>
Learn more about our benefits.</div></div></div></div><div></div><div>
T. Rowe Price is an equal opportunity employer and values diversity of thought, gender, and race. We believe our continued success depends upon the equal treatment of all associates and applicants for employment without discrimination on the basis of race, religion, creed, color, national origin, sex, gender, age, mental or physical disability, marital status, sexual orientation, gender identity or expression, citizenship status, military or veteran status, pregnancy, or any other classification protected by country, federal, state, or local law.</div></div>

Senior Threat Intelligence Analyst

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><p>
Safeguarding the organization&rsquo;s IT and OT environments by detecting, investigating, and proactively hunting for cyber threats. The role bridges intelligence and operations, turning threat data into actionable detections and hunt activities. Working closely with SOC Team, the specialist enhances detection capabilities and strengthens the organization&rsquo;s overall cyber resilience.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Job Context &amp; Major Challenge(s)
</b></h2></div><div><p>Major challenges are,</p>
<p>
(1)Keeping pace with evolving threat landscape as attackers develop new techniques and strategies.</p>
<p>
(2)Thorough understanding of security operations centre (SOC) 24x7</p>
<p>
(3) supporting the Information Risk Management Division Manager in dealing with an increased cybersecurity risk due to the geopolitical situation</p>
<p>
(4) Contributing to the ongoing continuous improvement of SOC due to the current maturity level and the changing threat level</p>
<p>
(5) Keeping up to date with IT and OT cyber threats to stay ahead of such threats.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Key Job Accountabilities - I</b></h2>
</div><div><ul><li>Perform proactive threat hunting across IT and OT networks using intelligence from the Threat Analyst to uncover stealthy or undetected threats.</li>
<li>Analyse and correlate security incidents to understand attacker behaviour, techniques, and campaign patterns beyond simple alerts.</li>
<li>Bridge threat intelligence with detection logic, translating new IOCs, TTPs, and adversary trends into actionable detection content for the SOC Engineer to implement.</li>
<li>Conduct deep-dive investigations on high-severity alerts, ensuring accurate root cause determination and actionable recommendations.</li>
<li>Support incident response teams during containment and eradication phases by providing context on attacker tools, tactics, and infrastructure.</li>
<li>Collaborate with the SOC Engineer to refine SIEM use cases, detection rules, and SOAR playbooks based on threat hunting outcomes.</li>
<li>Perform malware reverse engineering and behavioural analysis, extracting IOCs, YARA rules and technical findings to feed into threat hunting and detection development.</li>
<li>Develop and maintain threat profiles for key adversaries and attack scenarios targeting both IT and OT environments.</li>
<li>Prepare technical briefings reports summarizing threat findings and lessons learned for management.</li>
<li>Continuously improve analytical techniques, staying current with emerging threats, tools, and frameworks like MITRE ATT&amp;CK.</li>
<li>Ensure alignment with legal and ethical guidelines to ensure team activities are authorized and do not compromise company&rsquo;s integrity or reputation.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor degree level in information security, computer science or engineering.</li>
<li>Holds a relevant professional certification such as (e.g., GCTI, GCIA, GCIH, GREM).</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience
</b></h2></div><div><ul><li>10 years Information Security experience in a similar position.</li>
<li>Proven experience in cyber threat analysis, hunting, and incident investigation across both IT and OT environments.</li>
<li>Strong understanding of network protocols, malware behaviour, and adversary TTPs aligned with the MITRE ATT&amp;CK framework.</li>
<li>Experience with SIEM/SOAR platforms, threat intelligence tools, and log analysis for advanced threat detection.</li>
<li>Strong analytical and investigative skills with hands-on experience in threat hunting.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation and actively promotes compliance.</li>
<li>Possesses a good understanding of IT and OT business applications.</li></ul></div></div></div></div></div><p></p>

Cyber Threat Specialist

Computacenter

<div><div><b>Location:</b> IN - Bangalore 24/7 | <b>Job-ID:</b> 214593 | <b>Contract type:</b> Standard | <b>Business Unit:</b> Others</div><br>
<div></div>
<p><b>
Life on the team</b></p>
<p>
Placed within our Security Operations function, our Cyber Threat Operations Team play an essential role in protecting Computacenter from the latest threats and threat actors. The Cyber Threat Operations Team work to ensure we have a forward-looking mentality to identify emerging threats and trends. Our team brings together a diverse set of specialist skills, including Threat Intelligence, Threat Hunting, Malware Analysis, Digital Forensics, Incident Response, and Threat Modelling. At our core, we are driven by a mission to &ldquo;investigate, collate and locate&rdquo;: to unearth new threats, collate all available information about them, and then seek them out and respond appropriately. The aim of the Cyber Threat Operations Team is to ensure the wider security division is one step ahead of security threats by applying technical knowledge and understanding of global events to produce relevant, actionable intelligence. The Cyber Threat Operations Team understand how threats feed into business risks. We lead on collecting, evaluating, and analysing all sources of information to produce finished Threat Intelligence to help inform Computacenter and minimise the risk of harm.</p><br>
<p>
</p><p><b>We are now looking for an experienced Threat Hunt Analyst to join our team. In this role you will be responsible for the prioritisation, gathering and analysing malware samples associated to emerging threats, and then disseminating your findings to relevant teams for appropriate action.</b></p><br>
<p></p>
<p><b>
What you&rsquo;ll do</b></p>
<ul>
<li>Support threat hunting team in day-to-day checklist(s), including log review, alert analysis, and investigation enrichment.</li>
<li>Support the improvement and development of new threat hunt queries based on observed and measured cyber threat activity.</li>
<li>Remain current on threats, exposures and mitigations (APT, Zero days, Methods &amp; tactics) that could impact Computacenter; Deliver specialist investigation and analysis on cyber security incidents to support the Computacenter Cyber Security Incident Response Team (CSIRT)</li>
<li>Maintenance of tooling to ensure the smooth running CTH services</li>
<li>Create hypotheses, generate structured plan and conduct threat hunts for given threats.</li>
<li>Create and maintain standard library of repeatable hunting queries to search for common attack techniques</li>
<li>Generate reports on discovered threats</li>
<li>Documentation of processes and services delivered by the team.</li></ul><br>
<p></p>
<p><b>
What you&rsquo;ll need</b></p>
<ul>
<li>Experienced in Information and Cyber Security, including a SOC.</li>
<li>Experienced in common open and closed source intelligence tools and technologies.</li>
<li>Experienced in adversary tactics and techniques frameworks such as Mitre ATT&amp;CK and Killchain.</li>
<li>Experienced in common SOC SIEM technology applications such as MS Sentinel.</li>
<li>Experienced in KQL, with ability to formulate advanced queries.</li>
<li>Experienced in investigating security breaches and security incident management.</li>
<li>Knowledge of specialist security technologies including CIS Benchmarks, Tenable etc.</li>
<li>Knowledge of specialist threat information sharing including STIX, TAXII, CiSP etc.</li>
<li>Knowledge of network topologies and protocols. Knowledge of security risk management, incident response and crisis management.</li>
<li>Communicates in a clear straightforward way (written and verbally)</li>
<li>Ability to present complex technical details in a simple business context</li>
<li>Excellent written and verbal English</li>
<li>Takes responsibility for own actions and ability to perform in a structured manner and to strict deadline.</li></ul><br>
<div></div>
<div><b>Current information for our applicants</b></div>
<div>Business as usual? Not quite. Of course, the Corona crisis also presents us with major challenges.</div><br>
<div></div>
<div>However, we are broadly positioned across various industries, plan for the long term and have always been flexible in our approach to our customers, especially in times of crisis. Our core business is digitisation. We believe that this topic will continue to grow in importance for many companies in both public and private sectors.</div><br>
<div></div>
<div>That's why there are still areas of our business with clear hiring requirements &ndash; and we would like to bring talent like you on board! By the way, we have completely virtualised our application process and our recruiters remain available to you should you have any questions.</div><br>
<div></div>
<div>We are still looking forward to getting to know you!</div><br>
<div></div>
<div><b>About us</b></div>
<div>Computacenter is a leading independent provider of IT infrastructure services. We work at the heart of digitisation, advising organisations on IT strategy, implementing the most appropriate technology and managing our customers&rsquo; infrastructures.</div><br>
<div></div>
<div>We offer a friendly, open working environment without too much fuss about hierarchy. We are looking for professionals with diverse competencies, personalities and strengths who want to live our shared value of teamwork and performance.</div><br>
<div></div>
<div>Interested in joining a company with a strong sense of community?<br>
We&rsquo;re growing. We&rsquo;re hiring. We encourage. We empower. We support.<br>
#CCfuturetalent</div></div>

Senior Technical Analyst

United Sol (Pvt.) Ltd

<p>Research, analyze, and reverse-engineer malicious code to produce detections, mitigation guidance, and threat intelligence for enterprise protection.</p><p>Responsibilities</p><ul><li>Analyze samples (static/dynamic) to determine behavior, persistence, and indicators of compromise.</li><li>Develop signatures, YARA rules, and detection content for endpoint and network tools.</li><li>Produce concise technical reports and IOC packages for incident response teams.</li><li>Feed findings into threat intelligence and help improve defensive controls.</li></ul><p>Required</p><ul><li>3+ years in malware analysis, incident response, or threat research.</li><li>Comfortable with reverse-engineering tools and analysis workflows (no requirement to author malicious tools).</li><li>Strong Windows and/or Linux internals knowledge and scripting ability (Python, PowerShell, etc.).</li><li>Degree in relevant field or equivalent experience.</li></ul><p>Desired</p><ul><li>Experience with sandboxing platforms, YARA, and public threat intelligence platforms.</li><li>Certification such as GIAC Reverse Engineering Malware (GREM) is a plus.</li></ul><p>Ethics</p><p>Role is strictly defensively focused; all analysis conducted for protection, detection, and lawful response.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Malware Research & Defensive Analyst (Reverse Engineering)

Group-IB

<div>
 <p>
  <strong>
   ABOUT GROUP-IB:
  </strong>
 </p>
 <p>
  Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company&rsquo;s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Group-IB&rsquo;s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats.
  </strong>
  These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
 </p>
 <p>
  <br/>
 </p>
 <p>
  Each of us can help make the world a safer place. Join us!
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   ABOUT THE ROLE:
  </strong>
 </p>
 <p>
  The selected candidate will be responsible for
  <strong>
   generating comprehensive cyber threat reports
  </strong>
  for both internal stakeholders and clients/partners. The reports will primarily cover
  <strong>
   Advanced Persistent Threat (APT) activities, intrusion tactics, techniques and procedures (TTP), as well as targeted entities.
  </strong>
  The role will involve leveraging internal and external resources to
  <strong>
   investigate threats and vulnerabilities,
  </strong>
  while also analyzing different threat actors and their attack infrastructure.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   YOUR MISSION
  </strong>
 </p>
 <ul>
  <li>
   Analyzing IOCs and TTPs of the Threat Actors from the META Threat Landscape;
  </li>
  <li>
   Craft, maintain, and document detection opportunities within the Threat Intelligence platform;
  </li>
  <li>
   Perform necessary correlation and research to create useful, compelling, and context-rich alerts for customers;
  </li>
  <li>
   Pursue research into current threats and industry trends to be aware of the most up-to-date threats in the META Threat Landscape;
  </li>
  <li>
   Drive initiatives to create detection content based on findings stemming from threat hunts and ad hoc detection opportunities;
  </li>
  <li>
   Develop mitigation and countermeasure strategies from collected threat intelligence;
  </li>
  <li>
   Leveraging MITRE ATT&amp;CK categorization to align observed threat actor activity to Tactics, Techniques, and Procedures (TTPs).
  </li>
  <li>
   Create professional reports on a specific threat or the threat landscape in general.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   WHAT SUCCESS LOOKS LIKE:
  </strong>
 </p>
 <ul>
  <li>
   Understanding and interest in the threat landscape in the META region.
  </li>
  <li>
   Experience in analyzing the cybercrime community and profiling the threat actors.
  </li>
  <li>
   Basic knowledge of scripting language (Python, Bash).
  </li>
  <li>
   Knowledge of network technologies and principles of functioning of data networks, understanding of the features of the common data transfer protocols.
  </li>
  <li>
   Knowledge of OS architecture and operating principles.
  </li>
  <li>
   Good interpersonal skills, as well as the ability to communicate effectively orally and in writing.
  </li>
  <li>
   Experience in working with the next sources: Virustotal, Urlscan, Shodan, RiskIQ, Public sandboxes
  </li>
  <li>
   Optionally: Group-IB or other Threat Intelligence platforms
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   OUR WORK ENVIRONMENT &amp; CULTURE:
  </strong>
 </p>
 <p>
  At Group-IB, we believe that employee happiness is fundamental to success.
 </p>
 <p>
  We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow.
 </p>
 <p>
  Whether you&rsquo;re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development.
 </p>
 <p>
  Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges.
 </p>
 <p>
  You&rsquo;ll be working with cutting-edge technologies recognized globally by Gartner, IDC, and Forrester, and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients.
 </p>
 <p>
  We take pride in our multicultural, values-driven culture&mdash;where mutual respect, collaboration, and shared goals unite us across borders. And with Group-IB&rsquo;s continued global growth and financial stability, your career trajectory here can accelerate faster than in most traditional environments.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   WHAT DO WE OFFER
  </strong>
  :
 </p>
 <ul>
  <li>
   Flexible Work Schedule
  </li>
  <li>
   We don&rsquo;t believe in fixed hours&mdash;what matters is impact, not time spent. You have the freedom to design your own workday in a way that drives results and balance.
  </li>
  <li>
   Comprehensive Health Coverage
  </li>
  <li>
   Your well-being comes first. We offer health insurance to support you when it matters most.
  </li>
  <li>
   Certifications &amp; Continuous Learning
  </li>
  <li>
   Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development&mdash;because your growth fuels our innovation.
  </li>
  <li>
   Meaningful Challenges &amp; Growth Paths
  </li>
  <li>
   From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set&mdash;and earn recognition and rewards along the way.
  </li>
  <li>
   Entrepreneurial spirit is encouraged
  </li>
  <li>
   We value initiative. Whether it&rsquo;s launching a tech blog, organizing events, building communities, or starting a sports team&mdash;Group-IB is a place where bold ideas are supported and celebrated.
  </li>
 </ul>
</div>


Cyber Intelligence Analyst

Search 6733+ Threat intelligence analyst jobs near you this October. New roles added regularly across leading industries. Apply today.