Digital Footprint Analyst

Kaspersky; São Paulo; On-site; BRL 150,000 - 210,000; Full time

Job summary

Kaspersky is seeking a Digital Footprint Analyst in São Paulo, Brazil. You will analyze customer-specific cyber threats using Kaspersky resources, OSINT and HUMINT, to identify threat actors, timelines and attacker motivations.

You will create alerts and reports to support customers across various sectors. Ideal candidates have 3+ years in cyber threat intelligence or research, strong English communication, and experience with darknet/clear web sources and large datasets.

Qualifications

• 3+ years of experience as a Cyber Threat Intelligence Analyst or Researcher.
• Experience with Clear/Deep/Dark-web sources and open-source intelligence techniques.
• Knowledge of threat vectors: Trojans, bots, phishing, exposed data, fake profiles, and online scams.
• Knowledge of network protocols (HTTP, HTTPS, TLS/SSL, IPv4/IPv6, DNS, WHOIS).
• Excellent written and spoken English.

Responsibilities

• Research and develop new approaches of attack surface monitoring and darknet analysis.
• Lead dedicated research for major customers to identify tailored threats.
• Advise customers on attack vectors and mitigation.
• Participate in Threat Hunting and Incident response procedures.
• Run research on adversaries and collect threat intelligence.
• Prepare finished intelligence reports for customers, security bulletins, weekly notes, etc.
• Collaborate with other Security Services teams to improve Digital Footprint Intelligence.

Skills

OSINT

HUMINT

Threat hunting

Threat intelligence

Data analysis

English communication

Job description

We’re searching for a Digital Footprint Analyst. In this role, you will analyze and investigate customer-specific cyber threats using Kaspersky knowledgebase and your own research skills, OSINT and HUMINT. You are required to find pieces of information and connect the dots to establish timelines of attack, identify threat actors' interests and motivations. You will need a thorough understanding of the cyber threat landscape, from malware types and attack vectors to a technical understanding of attack methods in order to replicate and mitigate them. Your role will include summarizing your finding and creating alerts and reports for our customers.

What You Will Be Doing:

• Research and develop new approaches of attack surface monitoring, Darknet analysis, detection of indicators of compromise and fraudulent resources.
• Lead dedicated research for our largest customers, identify tailored threats and security problems they may face
• Advise customers on attack vectors and mitigation needed
• Participate in Threat Hunting, Incident response procedures
• Run research on specific adversaries and continuously collect threat intell on them
• Prepare finished intelligence reports for the customer, security bulletins, weekly notes and etc
• Collaborate with other Security Services teams to improve Digital Footprint Intelligence service

What You Should Have/Know:

• 3+ years of experience as a Cyber Threat Intelligence Analyst or Researcher, proactively hunting for threats related to various sectors and disciplines
• Experience and understanding in Cyber Threat Intelligence, good knowledge in Clear / Deep / Dark-web sources and open-source intelligence techniques
• Experience with different threat vectors threatening our customers: Trojans, bots, phishing websites, vulnerable or misconfigured databases, exposed sensitive data, fake social media profiles, and various online scams
• Knowledge of network protocols as a must ( HTTP, HTTPS, TLS/SSL, IPv4/v6, DNS, WHOIS, etc.)
• Excellent English verbal and written communication skills
• 5+ years analytical experience working with large-scale datasets
• Experience with practical cybersecurity (pentests, red team exercises, web apps analysis, ics security assessments and etc.)
• Strong analytical skills including the ability to manipulate, model and interpret large quantities of structured data
• Excellent communication and presentation skills