Digital Footprint Analyst

Kaspersky Lab; Rio de Janeiro; Sur place; BRL 80 000 - 140 000; Plein temps

Résumé du poste

Kaspersky Lab in Brazil is seeking a Digital Footprint Analyst to analyze customer-specific cyber threats using OSINT and HUMINT, building timelines of attacks and identifying motive and actors’ interests. You will translate findings into alerts and reports for clients.

The role requires deep cyber threat intelligence knowledge, familiarity with dark/web sources, and strong English communication. You will lead threat hunting, collaborate with service teams, and contribute to intelligence

Qualifications

• 3+ years of experience in cyber threat intelligence analysis or research, proactively hunting threats for various sectors.
• Experience with Clear/Deep/Dark-web sources and open-source intelligence techniques.
• Knowledge of threat vectors: Trojans, bots, phishing websites, exposed data and scams.
• Understanding of network protocols (HTTP, HTTPS, TLS/SSL, IPv4/v6, DNS, WHOIS).
• Excellent English verbal and written communication skills.
• 5+ years analytical experience with large-scale datasets.
• Experience with practical cybersecurity activities (pentests, red team, web apps, ICS security).

Responsabilités

• Research and develop new approaches for attack surface monitoring and darknet analysis.
• Lead dedicated research for major customers, identify tailored threats and security problems.
• Advise customers on attack vectors and mitigation strategies.
• Participate in threat hunting and incident response procedures.
• Run research on adversaries and continuously collect threat intelligence.
• Prepare finished intelligence reports, security bulletins, and weekly notes.
• Collaborate with other Security Services teams to improve Digital Footprint Intelligence.

Connaissances

Analytical skills

Communication skills

English language

Description du poste

We’re searching for a Digital Footprint Analyst. In this role, you will analyze and investigate customer-specific cyber threats using Kaspersky knowledgebase and your own research skills, OSINT and HUMINT. You are required to find pieces of information and connect the dots to establish timelines of attack, identify threat actors' interests and motivations. You will need a thorough understanding of the cyber threat landscape, from malware types and attack vectors to a technical understanding of attack methods in order to replicate and mitigate them. Your role will include summarizing your finding and creating alerts and reports for our customers.

What You Will Be Doing:

• Research and develop new approaches of attack surface monitoring, Darknet analysis, detection of indicators of compromise and fraudulent resources.
• Lead dedicated research for our largest customers, identify tailored threats and security problems they may face
• Advise customers on attack vectors and mitigation needed
• Participate in Threat Hunting, Incident response procedures
• Run research on specific adversaries and continuously collect threat intell on them
• Prepare finished intelligence reports for the customer, security bulletins, weekly notes and etc
• Collaborate with other Security Services teams to improve Digital Footprint Intelligence service

What You Should Have/Know:

• 3+ years of experience as a Cyber Threat Intelligence Analyst or Researcher, proactively hunting for threats related to various sectors and disciplines
• Experience and understanding in Cyber Threat Intelligence, good knowledge in Clear / Deep / Dark-web sources and open-source intelligence techniques
• Experience with different threat vectors threatening our customers: Trojans, bots, phishing websites, vulnerable or misconfigured databases, exposed sensitive data, fake social media profiles, and various online scams
• Knowledge of network protocols as a must ( HTTP, HTTPS, TLS/SSL, IPv4/v6, DNS, WHOIS, etc.)
• Excellent English verbal and written communication skills
• 5+ years analytical experience working with large-scale datasets
• Experience with practical cybersecurity (pentests, red team exercises, web apps analysis, ics security assessments and etc.)
• Strong analytical skills including the ability to manipulate, model and interpret large quantities of structured data
• Excellent communication and presentation skills