Junior Threat Analyst

Hoxhunt; Helsinki; Hybrid; EUR 16,000 - 23,000; Part time

Benefits offered by this job

Healthcare

Gym & swimming pool at Helsinki office

Hybrid work

Part-time flexibility 15–25h/week

Job summary

Hoxhunt in Helsinki seeks a Junior Threat Analyst to analyze real phishing reports and classify emails and payloads while growing threat-intelligence skills. You will work within a collaborative team focused on threat detection and data-driven insights.

The role is a flexible, part-time position (15–25 hours/week) in a hybrid setup, with a start date around early January 2027. The compensation starts at 14 €/h for the fixed-term contract (9–12 months) and offers growth opportunities.

Qualifications

• Ongoing studies in cybersecurity or a related field.
• Fluent English is required.
• Proactive, independent, solution‑oriented approach with strong ownership.
• Curiosity with fresh eyes and attention to detail.
• Comfort with AI tools and new technologies.

Responsibilities

• Analyze real phishing reports from end-users using our tooling.
• Classify and tag emails and payloads (e.g., credential harvesters, malware).
• Develop domain expertise to map the current threat landscape.
• Share findings across the company and with customers to explain trends and risks.
• Co-author reports, from concise briefs to in-depth analyses for a global audience.
• Proactively report insights in channels and team meetings.

Skills

English fluency

Cybersecurity interest

Proactive mindset

Ownership

Curiosity

Education

Ongoing studies in cybersecurity

Job description

Our mission and why it matters

We are on a mission to make humans the strongest security layer.

Human risk remains one of the biggest vulnerabilities and traditional awareness training is not enough. We take a different approach by combining AI-driven personalization, real threat detection, and behavioral science to actively protect people and organizations.

We don't just simulate risks. We build the tools that detect and stop them.

Why this role matters

At Hoxhunt, we do not stop at training employees; we analyze real threats, remediate incidents, and help security teams stay ahead of attackers. To make this happen, our operations must constantly evolve, and that is where you come in. As a Junior Threat Analyst, you will be trained to analyze real phishing reports from our end-users around the globe, giving us a unique window into the phishing landscape. Your verdicts and findings will feed directly into products that defend companies from cybercrime and make the world more secure, within a team driven by a shared mission.

What you will do

• Analyze real phishing reports from end-users, building your own efficient workflow using our purpose-built tooling.

• Classify and tag emails and their payloads, such as credential harvesters and malicious files.

• Turn your domain expertise into insight, using structured analytic techniques to build a clear, current view of the threat landscape as you grow into the role.

• Share findings across the company and with customers to help them understand emerging trends and risks.

• Co-author reports, ranging from concise briefs to in-depth analyses that reach a global audience.

• Proactively report insights and notable findings on our communication channels or in team meetings.

What makes you thrive here

You have:

• A strong interest in cybersecurity and a keen desire to build a career around this field.

• Ongoing studies in cybersecurity or a field beneficial to the sector (e.g., mathematics, computer science, information technology, engineering, linguistics, journalism, psychology, or communications).

• A proactive, independent, solution-oriented approach with strong self-management abilities—we give you freedom to execute your work and expect a strong sense of ownership and dependability in exchange.

• Curiosity with fresh eyes: you notice what is odd and what could work better, and say so from week one.

• Precision and resilience with routine: you find satisfaction in doing high-volume triage well and in spotting the one in a hundred that is new.

• Humility and a hunger for feedback: you ask for help early, would rather flag 'not sure yet' than guess, and visibly act on what you hear.

• Fluency with AI tools: you use them to sharpen your thinking and speed up your work, and you know when not to trust them.

• The ability to hold and change a position: you defend a verdict with evidence, challenge others constructively, and commit once it is settled.

• Trustworthiness with sensitive data: you will handle real emails from real organizations and treat them with care.

• Fluency in English.

Bonus points if you also:

• Speak other languages, as phishing arrives in every language!

Who you will work with

This is your stepping stone into the cybersecurity field, and you will work in a team focusing on a wide array of tasks related to threat intelligence, security engineering, and data science. The team often prefers to work together from our Ruoholahti office, tackling a mix of high-volume independent analysis and collaboration on edge cases. You will join colleagues who operate by three core principles: courage to take initiative, hunger for feedback, and succeeding together. We grant you opportunities to take initiative and grow within the organization, with the expected outcome of a successful term being a permanent position.

What you can expect from us

• Compensation: Starting salary of 14 €/h, reviewed based on performance. The initial contract is a fixed term (9 to 12 months, your choice), during which we together define your future path within the company, with a start date of January 4th, 2027.

• Working ways: We work in a flexible, hybrid work setting. You are expected to visit the Helsinki (Ruoholahti) office weekly, and the team often prefers to work together from there. This is a very flexible part-time role designed to combine with your studies (15-25h/week, with working days and hours flexible week-to-week; additional hours for holiday periods are negotiable).

• High performance meets high humanity: We bring an incredibly driven, high-impact energy to our work, but we leave our egos at the door. You will be surrounded by wildly talented, dedicated colleagues in an environment built on extreme kindness, support and psychological safety.

• Authentic trust & autonomy: We hire great people and trust them to do great work. You will find a culture free of micromanagement, giving you the autonomy to take real ownership, drive impact and shape things early on.

• A product you can be proud of: It is incredibly rare in cybersecurity to build a product that end-users genuinely love. You will join a fast-paced, technically sophisticated team making a real, measurable impact against cybercrime.

• The perks that matter: Alongside this amazing community, you will enjoy extensive healthcare with other benefits and our beautiful office in Helsinki (complete with a gym and swimming pool!).

Recruitment Process

We want to get to know you and how you think! Our process includes:

1. Phone discussion with your potential future team lead (30 min)

2. Teams meeting with your potential future team lead and colleague (30 min)

3. Home assignment and live walkthrough (~60 min solo work on the assignment + 60 min on-site interview at our office)

4. Reference checks

About Hoxhunt

Hoxhunt was founded in 2016 by four visionaries. Today we are a global team of +270 amazing Hoxhunters advancing a truly AI-native category leader in human risk management, with key hubs in the United States, the United Kingdom, Singapore, and Finland. We are proud to be an award-winning, fast-growing software company, recognized by G2 and Gartner, named to TIME Magazine's list of the World's Top EdTech Companies, and featured for our innovation in major publications like Fast Company, TechCrunch, Forbes, and Inc.

As a multi-product company, Hoxhunt goes beyond traditional security awareness. We don't just educate employees through frequent, personalized, and behavior-changing cybersecurity training - we also actively build real threat intelligence and response tools that protect organizations against malicious cyberattacks every single day.