Cyber Threat Intelligence Analyst - LATAM

**About Us:** Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses and citizens and support law enforcement operations. Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities. Each of us can help make the world a safer place. **Join us!** **About the role:** Group-IB Threat Intelligence is looking for a Cyber Intelligence Analyst to join our Cybercrime Research team to help us combat the cybercriminals operating in the Dark web and open sources. The selected candidate will be responsible for covering and researching major cyber threats that pose risks to the LATAM region. This individual will analyze various types of threat actors, ranging from hacktivists to Advanced Persistent Threats (APTs). The role involves leveraging both internal and external resources to investigate threats and vulnerabilities, analyzing various threat actors and their attack infrastructures, and contributing to the development of a regional Threat Landscape to support our mission of fighting cybercrime in the region. **Tasks to solve:** - Analyzing IOCs and TTPs of the Threat Actors from the Latin America Threat Landscape - important to have knowledge of prevalent threats in the region such as banking Trojan, remote access trojan, etc. - Craft, maintain, and document detection opportunities within the Threat Intelligence platform. - Manage information and details related to threat actors TTPs and Opsec. - Perform necessary correlation and research to create useful, compelling, and context-rich alerts for customers. - Pursue research into current threats and industry trends to be aware of the most up-to-date threats in LATAM Threat Landscape. - Drive initiatives to create detection content based on findings stemming from threat hunts and ad hoc detection opportunities. - Develop mitigation and countermeasure strategies from collected threat intelligence. - Leveraging MITRE ATT&CK categorization to align observed threat actor activity to Tactics, Techniques, and Procedures (TTPs). **Apply for this role if you have:** - A genuine passion for investigating cybercrime, not just to produce reports, but to actively combat and mitigate its impact. - Understanding and interest in the threat landscape in the LATAM region. - Knowledge of global and local cyber threats, including ransomware, initial access broker, banking trojan, remote access trojan, and fraudsters. - Experience in analyzing the cybercrime community and profiling the threat actors. - Deep understanding of the darkweb ecosystem, including knowledge of major platforms, types of goods and services traded, market dynamics, and communication methods used within underground communities - Basic knowledge of scripting languages (Python, Bash). - Knowledge of network technologies and principles of functioning of data networks, understanding of the features of the common data transfer protocols. - Knowledge of OS architecture and operating principles. - Good interpersonal skills, as well as the ability to communicate effectively orally and in writing. - Experience in working with the following sources: Virustotal, Urlscan, Shodan, RiskIQ, Public sandboxes - Optionally: Group-IB or other threat intelligence platforms. - **Fluency in Spanish and English.** **Why choose Group-IB:** - **Your happiness is important to us:** We want every single team member to be happy. - **Continuing professional development:** At Group-IB, you can choose from various paths to growth: progress as an expert, adv…