Email Security Analyst

KnowBe4; São Paulo; Presencial; BRL 80 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Bonuses based on monthly sales targets

Employee referral bonuses

Tuition reimbursement

Certification reimbursement

Resumo da oferta

KnowBe4's Threat Labs is seeking an Email Security Analyst to investigate real‑world email threats, extract IOCs, and map campaigns to MITRE ATT&CK. You will use VirusTotal, URLScan.io, and Python to turn threat data into actionable insights.

Join a collaborative team, contribute to technical blogs and intelligence documentation, and help protect users globally across our platforms.

Qualificações

• 1–2 years of cybersecurity analytics experience.
• Understanding of common threats (e.g., domain spoofing, spear-phishing).
• Ability to handle large datasets with attention to detail.

Responsabilidades

• Manual Threat Analysis: Investigate and classify suspicious emails to identify phishing, malware, spam, and benign attempts from real‑world attack scenarios using our internal tooling.
• IOC Extraction: Extract and document Indicators of Compromise—URLs, domains, file hashes, sender information—from email headers, body content, and attachments.
• Campaign Tracking: Research and monitor ongoing email‑based threat campaigns, mapping attacker tactics, techniques, and procedures (TTPs) to MITRE ATT&CK.
• Intelligence Contribution: Build and maintain internal threat intelligence datasets, detection patterns, and research documentation.
• Collaboration: Partner with senior researchers and participate in threat reviews to share observations and enhance detection quality.
• Growth: Keep learning! Share discoveries, explore new analysis techniques, and raise the bar for the team.

Conhecimentos

Threat analysis

IOC extraction

Data analysis

MITRE ATT&CK

Formação académica

Vocational IT training

Technical diplomas

Relevant certifications (e.g., CompTIA IT Fundamentals)

Ferramentas

VirusTotal

URLScan.io

Python

Descrição da oferta de emprego

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15-years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.

As an Email Security Analyst at KnowBe4's Threat Labs, you'll conduct hands‑on analysis of real‑world email‑based cyber threats by investigating suspicious emails to identify phishing, malware, and social engineering attacks, extracting indicators of compromise (IOCs) like URLs, domains, and file hashes, tracking ongoing threat campaigns using OSINT tools and mapping them to MITRE ATT&CK frameworks, and contributing technical research blogs and intelligence documentation that helps protect users globally—all while working alongside experienced security researchers in a collaborative environment using industry‑standard tools like VirusTotal, URLscan.io, and Python scripting to turn raw threat data into actionable cybersecurity intelligence.

Responsibilities

• Manual Threat Analysis: Investigate and classify suspicious emails to identify phishing, malware, spam, and benign attempts from real‑world attack scenarios using our internal tooling.
• IOC Extraction: Extract and document Indicators of Compromise—URLs, domains, file hashes, sender information—from email headers, body content, and attachments.
• Campaign Tracking: Research and monitor ongoing email‑based threat campaigns, mapping attacker tactics, techniques, and procedures (TTPs) to MITRE ATT&CK.
• Intelligence Contribution: Build and maintain internal threat intelligence datasets, detection patterns, and research documentation.
• Collaboration: Partner with senior researchers and participate in threat reviews to share observations and enhance detection quality.
• Growth: Keep learning! Share discoveries, explore new analysis techniques, and raise the bar for the team.

Requirements

• Educational Background: A university degree is not required. We actively encourage applications from individuals with vocational IT training, technical diplomas, relevant certifications (e.g., CompTIA IT Fundamentals), or those returning to the workforce who possess strong digital literacy.
• 1-2 years experience in the field
• An understanding of common cybersecurity threats (e.g., domain spoofing, spear‑phishing)
• Exceptional attention to detail and the stamina to maintain focus during highly repetitive analytical tasks
• Experience handling large datasets

Benefits

We offer company‑wide bonuses based on monthly sales targets, employee referral bonuses, adoption assistance, tuition reimbursement, certification reimbursement, and certification completion bonuses - all in a modern, high‑tech, and fun work environment. For more details about our benefits in each office location, please visit www.knowbe4.com/careers/benefits.

Note: An applicant assessment and background check may be part of your hiring procedure.

Individuals seeking employment at KnowBe4 are considered without prejudice to race, color, religion, national origin, age, sex, marital status, ancestry, physical or mental disability, veteran status, gender identity, sexual orientation or any other characteristic protected under applicable federal, state, or local law. If you require reasonable accommodation in completing this application, interviewing, completing any pre‑employment testing, or otherwise participating in the employee selection process, please visit www.knowbe4.com/careers/request-accommodation.

No recruitment agencies, please.