Group IB

3 months ago

Senior Threat Intelligence Analyst - based in Mexico

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Support the Cybercrime Research team by researching major cyber threats affecting the LATAM region. You will analyze threat actors and their infrastructure, including hacktivists through APTs, investigate IOCs and TTPs, and use internal/external sources to build a regional Threat Landscape. The role includes crafting detections and compelling, context-rich alerts for customers, developing mitigation and countermeasures, and applying MITRE ATT&CK to map observed activity to TTPs.

Location: Mexico

Workplace: Remote

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Analyze IOCs and TTPs from the LATAM Threat Landscape, including region-prevalent threats such as banking trojans and remote access trojans.
•Craft, maintain, and document detection opportunities within the Threat Intelligence platform.
•Manage threat actor information, TTPs, and Opsec details to support investigation and reporting.
•Perform correlation and research to create useful, context-rich alerts for customers.
•Develop mitigation and countermeasure strategies and map observed activity to MITRE ATT&CK TTPs.

Pay and Benefits

Perks:Training CoursesIncentive Program

Key Requirements

•Passion for investigating cybercrime and actively mitigating its impact.
•Strong understanding of the LATAM threat landscape and common cyber threats (e.g., ransomware, initial access broker, banking trojan, remote access trojan).
•Experience analyzing cybercrime communities and profiling threat actors, including darkweb ecosystem knowledge (platforms, traded goods/services, market dynamics, communication methods).
•Basic scripting knowledge (Python, Bash) and understanding of network technologies, protocols, and OS architecture.
•Fluency in Spanish and English, with strong oral and written communication; experience using sources such as VirusTotal, Urlscan, Shodan, RiskIQ, and public sandboxes.

Experience:CybercrimeThreat intelligenceDark web

Skills:Interpersonal skillsCommunicationResearchAnalysisCollaboration

Certifications:CEHCISSPOSCPGIACMCFEBSI

Languages:SpanishEnglish

Tech Stack:PythonBashMITRE ATT&CKVirusTotalUrlscanShodanRiskIQPublic sandboxesThreat Intelligence platformDark web

Company Brief

Group IB

Website

Loading job details...

Preparing the role view and application actions.

Group IB

3 months ago

Senior Threat Intelligence Analyst - based in Mexico

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 1 hour agoStatus: Live

Job Summary

Location: Mexico

Workplace: Remote

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Mid level

Key Responsibilities

•Analyze IOCs and TTPs from the LATAM Threat Landscape, including region-prevalent threats such as banking trojans and remote access trojans.
•Craft, maintain, and document detection opportunities within the Threat Intelligence platform.
•Manage threat actor information, TTPs, and Opsec details to support investigation and reporting.
•Perform correlation and research to create useful, context-rich alerts for customers.
•Develop mitigation and countermeasure strategies and map observed activity to MITRE ATT&CK TTPs.

Pay and Benefits

Perks:Training CoursesIncentive Program

Key Requirements

•Passion for investigating cybercrime and actively mitigating its impact.
•Strong understanding of the LATAM threat landscape and common cyber threats (e.g., ransomware, initial access broker, banking trojan, remote access trojan).
•Experience analyzing cybercrime communities and profiling threat actors, including darkweb ecosystem knowledge (platforms, traded goods/services, market dynamics, communication methods).
•Basic scripting knowledge (Python, Bash) and understanding of network technologies, protocols, and OS architecture.
•Fluency in Spanish and English, with strong oral and written communication; experience using sources such as VirusTotal, Urlscan, Shodan, RiskIQ, and public sandboxes.

Experience:CybercrimeThreat intelligenceDark web

Skills:Interpersonal skillsCommunicationResearchAnalysisCollaboration

Certifications:CEHCISSPOSCPGIACMCFEBSI

Languages:SpanishEnglish

Tech Stack:PythonBashMITRE ATT&CKVirusTotalUrlscanShodanRiskIQPublic sandboxesThreat Intelligence platformDark web

Company Brief

Group IB

Website