Junior Threat Investigation Analyst ( istanbul / Ankara)

Cyberwise; Fatih; Hybrid; TRY 134,000 - 223,000; Full time

Benefits offered by this job

Hybrid work model

Monthly remote work allowance

Private health insurance

Employee Assistance Program (Online心理상

Online English training

Employee recognition and rewards

Tuition discounts for master’s/doctor‑

Life moment time off

Job summary

Cyberwise, Turkey's first CREST-accredited local cybersecurity company, is seeking a Junior Threat Investigation Analyst to join our Istanbul or Ankara team. You’ll support threat intelligence, OSINT research, and incident response in a highly collaborative, research-driven environment.

You will work in a hybrid model, contribute to CTI processes, and grow technical skills across Windows, Linux, DFIR, and scripting while communicating findings to cybersecurity stakeholders.

Qualifications

• Associate’s or bachelor’s degree from an accredited university.
• Basic knowledge of CTI and threat research methodologies.
• Familiarity with Windows and Linux operating systems.
• Basic understanding of cyberattack techniques and MITRE ATT&CK.
• Familiarity with IOC analysis, OSINT investigations, and threat intel sources.
• Basic knowledge of DFIR and incident response processes.
• Basic understanding of log analysis and network traffic analysis.
• Basic scripting ability in Python, PowerShell, or Bash.
• Sufficient English to read technical docs and research.
• Strong interest in cybersecurity research and technical analysis.
• Analytical thinking and problem-solving with attention to detail.
• Willingness to learn and collaborate within a team.
• Strong documentation and communication skills.

Responsibilities

• Actively contribute to Cyber Threat Intelligence (CTI) processes and threat research activities.
• Research threat actors, attack groups, and ongoing cyberattack campaigns.
• Conduct OSINT investigations across Dark Web and Deep Web sources.
• Investigate and analyze Indicators of Compromise (IOCs) including IPs, domains, URLs and file hashes.
• Support cybersecurity incident investigations and incident response activities.
• Analyze adversary TTPs using the MITRE ATT&CK framework.
• Research vulnerabilities, exploitation techniques, and emerging threats.
• Document research findings and clearly communicate results to teams.
• Stay up to date with latest cybersecurity threats and trends.

Skills

CTI basics

Windows

Linux

MITRE ATT&CK

IOC analysis

OSINT investigations

DFIR basics

Log analysis

Network analysis

Scripting (Python/PowerShell/Bash)

English documentation reading

Analytical thinking

Documentation & communication

Team collaboration

Education

Associate’s or bachelor’s degree

Job description

Turkey's First CREST-Accredited Local Cybersecurity Company

As one of Turkey's leading cybersecurity solution providers, we adopt a holistic security approach covering IT, OT, and Cyber-Physical Systems. Our end-to-end cybersecurity services are delivered by expert teams and include audit, consultancy, product sales, technical support, and managed services.

With over 35 years of industry experience and a team of professionals holding the most respected certifications in the field, we continue to operate as one of Turkey's foremost cybersecurity providers.

In addition to our offices in Istanbul, Ankara, and Izmir, we also operate globally through our locations in Dubai, Abu Dhabi, and Amsterdam.

With over 300 expert employees, we serve more than 750 corporate clients across the EMEA region, delivering world-class cybersecurity solutions to critical sectors such as energy, finance, telecommunications, and public institutions.

Why Join Cyberwise

We embrace a team culture that values employees' ideas, supports innovation, and is built on transparent communication. While promoting flexibility, we also prioritize a balance between discipline and mutual trust within the team.

At Cyberwise, we aim not only to protect today but also to safeguard the future. With our ability to analyze and resolve technically complex problems, we generate real value in the industry and develop reliable, sustainable solutions.

A career at Cyberwise is more than just a job — it's a journey filled with growth, impact, and inspiration.

We offer an environment where you can showcase your talents, make a difference with your ideas, and contribute to shaping the future of cybersecurity.

Throughout your application process, we respect your potential and look forward to getting to know you better. #FollowTheWise

Join us on this journey — let's leave a mark together!

We're looking for a Junior Threat Investigation Analyst to join our team in Istanbul or Ankara, playing a key role in supporting our cyber threat intelligence and incident response activities while contributing to a high-performing, highly collaborative, and research-driven cybersecurity team.

Key Responsibilities

• Actively contribute to Cyber Threat Intelligence (CTI) processes and threat research activities.
• Research threat actors, attack groups, and ongoing cyberattack campaigns.
• Conduct Open-Source Intelligence (OSINT) investigations and threat research across Dark Web and Deep Web sources.
• Investigate and analyze Indicators of Compromise (IOCs), including IP addresses, domains, URLs, and file hashes.
• Support cybersecurity incident investigations and incident response activities.
• Analyze adversary tactics, techniques, and procedures (TTPs) using the MITRE ATT&CK framework.
• Research security vulnerabilities, exploitation techniques, and emerging cyber threats.
• Document research findings and effectively communicate technical analysis results to relevant teams.
• Stay up to date with the latest cybersecurity threats, trends, and developments.

Requirements

• Associate’s or bachelor’s degree from an accredited university.
• Basic knowledge of Cyber Threat Intelligence (CTI) and threat research methodologies.
• Familiarity with Windows and Linux operating systems.
• Basic understanding of cyberattack techniques, the attack lifecycle, and the MITRE ATT&CK framework.
• Familiarity with IOC analysis, OSINT investigations, and threat intelligence sources.
• Basic knowledge of Incident Response and Digital Forensics and Incident Response (DFIR) processes.
• Basic understanding of log analysis and network traffic analysis.
• Basic proficiency in at least one scripting language, such as Python, PowerShell, or Bash.
• Sufficient English proficiency to read technical documentation and conduct research.
• Strong interest in cybersecurity research and technical analysis.
• Analytical thinking and problem-solving skills, with attention to detail.
• Willingness to learn, continuously develop technical skills, and collaborate effectively within a team.
• Strong documentation and communication skills, with the ability to present research findings clearly and effectively.

What Awaits You at Cyberwise

• Work in a hybrid model
• Benefit from a monthly remote work allowance
• Private health insurance (your family matters to us)
• Employee Assistance Program (Online Psychologist Service)
• Employee Assistance Program (Online One-on-One English Training)
• Employee Recognition and Reward System
• Tuition discounts for master's and doctoral programs
• Time off for special life moments (Your Birthday, First Day of School, and Report Card Day)

  What Awaits You at Cyberwise

  • Access extensive training, skill development, and certification support
  • Take part in a vibrant employee experience enriched by WiserHype club membership and engaging events
  • Collaborate with technically strong, supportive, and open-minded teammates
  • Contribute to nationally scaled and high-impact projects
  • Take ownership in meaningful and innovative initiatives
  • Grow within a culture that values continuous learning and shared success
  • Be part of a people-first workplace with a strong corporate culture, recognized as a Great Place to Work Certified company

  How Cyberwise Stands Out

  • Serving critical infrastructures and large-scale enterprises
  • Adopting a strategic mindset that goes beyond solution delivery
  • Combining deep technical expertise with real-world field experience
  • Fostering a team culture that supports initiative and encourages growth
  • Gaining experience through disruptive and forward-thinking projects
  • Building strong collaborations and global technology partnerships
  • Being part of solutions that shape the future of the industry
  • Developing diverse perspectives through interdisciplinary collaboration
  • Thriving in a supportive work environment that promotes continuous learning and creativity