Назад
Company hidden
2 дня назад

Threat Researcher (Cybersecurity)

Формат работы
remote (только Brazil)
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Brazil
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Threat Researcher (Cybersecurity): Investigating phishing, fraud, leaked credentials, malicious infrastructure, malware, and threat-actor activity from OSINT, underground sources, internal datasets, and customer-provided information with an accent on evidence correlation, infrastructure mapping, and actionable intelligence reporting. Focus on conducting end-to-end investigations, validating indicators with AI-assisted tools, and improving repeatable hunting, monitoring, and remediation workflows.

Location: Home office in Brazil; listed location is Porto Alegre, Rio Grande do Sul.

Company

hirify.global develops cloud-first networking and security solutions protecting enterprise and critical-infrastructure environments.

What you will do

  • Conduct end-to-end investigations into phishing, brand abuse, fraud, leaked credentials, malware, malicious infrastructure, and threat actors.
  • Hunt for artifacts across the deep web, dark web, Telegram, underground forums, social platforms, and other authorized sources.
  • Analyze URLs, domains, IP addresses, hashes, credentials, files, advertisements, and related evidence to identify malicious activity and exposure.
  • Enrich and correlate indicators using OSINT, threat-intelligence sources, internal datasets, and approved intelligence platforms.
  • Document methods, evidence, confidence levels, limitations, and conclusions, and produce concise intelligence reports, campaign briefs, updates, and executive summaries in English.
  • Contribute validated findings to intelligence platforms, monitoring workflows, and takedown or remediation processes while collaborating with Threat Intelligence, Engineering, Automation, Product, and customer-facing teams.

Requirements

  • At least two years of experience in cyber threat intelligence, threat hunting, fraud analysis, digital risk protection, SOC operations, incident response, OSINT investigations, or a related cybersecurity field.
  • Practical experience investigating phishing, fraud, brand abuse, leaked data, malicious domains, credentials, malware, or threat actors.
  • Working knowledge of indicators of compromise, attack infrastructure, tactics, techniques, procedures, and confidence-based analysis.
  • Experience using OSINT and threat-intelligence tools to research domains, IP addresses, URLs, files, identities, infrastructure, or underground activity.
  • Ability to correlate evidence from multiple sources, distinguish facts from assumptions, and maintain clear source traceability.
  • Strong written communication skills and the ability to produce structured, accurate, and actionable intelligence reports in English.
  • Familiarity with spreadsheets, structured data, search operators, basic scripting, or query languages such as SQL.
  • Ability to use AI-assisted research and productivity tools thoughtfully, validate generated content, and follow data-protection guidelines.
  • Ability to collaborate effectively, manage priorities across multiple investigations, ask for guidance, and incorporate feedback.
  • Bachelor’s degree or equivalent practical experience in Cybersecurity, Computer Science, Information Technology, Intelligence, Journalism, Languages, or a related field.

Nice to have

  • Python experience.
  • Portuguese or Spanish proficiency.
  • Relevant certifications or training.

Culture & Benefits

  • Flexible work options for a home-office role in Brazil.
  • Health coverage, generous paid time off, and pay transparency.
  • Learning opportunities, career-mobility programs, leadership workshops, mentoring, and continuous learning.
  • Sixteen paid volunteer hours annually, employee resource groups, charitable giving with company match, and a collaboration-focused workplace policy.
  • Access to modern offices with EV charging, healthy snacks, and culture celebrations.

Hiring process

  • The first 90 days include cultural onboarding, mentor connections, systems mapping, stakeholder meetings, and short- and long-term goal setting.
  • Progression includes independently completing standard investigations within six months and owning moderately complex investigations with limited supervision within one year.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →