Назад
Company hidden
3 дня назад

Threat Researcher

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Threat Researcher: Investigating emerging cyber threats and attacker techniques across web and email ecosystems with an accent on uncovering real-world malicious activity and generating new insights. Focus on reverse-engineering malicious services and analyzing large-scale datasets to build actionable detections and product protections.

Location: Tel-Aviv, Israel

Company

hirify.global is redefining consumer cybersecurity for the modern internet, protecting millions of people daily from evolving threats.

What you will do

  • Investigate end-to-end threat leads including phishing, scams, malvertising, and social-engineering campaigns.
  • Build and maintain hirify.global’s threat knowledgebase, tracking trends and discovering new techniques.
  • Collaborate with security analysts, backend engineers, and product teams to translate research into protections.
  • Utilize internal intelligence, OSINT, network tools, and custom automation to uncover attacker infrastructure.
  • Reverse-engineer malicious services, scripts, and payloads to understand functionality and attack flow.
  • Analyze emails, raw headers, SMTP metadata, and propagation patterns to connect related threat components.
  • Query, process, and analyze large-scale datasets using BigQuery, SQL, and pandas to identify patterns and validate hypotheses.

Requirements

  • 2+ years of experience in security research, threat intelligence, OSINT investigations, or equivalent.
  • Strong familiarity with browsers, DOM, JavaScript, and DevTools for analyzing malicious behavior.
  • Hands-on experience writing scripts or tools (Python/JavaScript) for automation, data parsing, or intel collection.
  • Understanding of network fundamentals: DNS, WHOIS, HTTP/S flows, redirects, and IP ranges.
  • Curiosity or experience in email threat analysis: SMTP headers, MIME structure, SPF/DKIM/DMARC, and phishing techniques.
  • Comfortable using tools like Burp Suite, URLScan, VirusTotal, and Shodan.
  • Experience analyzing datasets using SQL, BigQuery, or pandas, with the ability to spot trends and anomalies.

Culture & Benefits

  • Culture rooted in transparency, feedback, and collaboration with shared wins, team dinners, and company trips.
  • High level of autonomy in a fast-paced environment with immediate product and user impact.
  • Opportunity to grow at lightning speed and shape the next frontier of online safety.
  • Build internal research tools and analysis platforms.
  • Work with a team protecting over 1 million users.

Будьте осторожны: если вас просят войти в iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →