Senior Cyber Investigation Specialist – LATAM – Colombia based.
What makes the role special
About Group-IB
Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses and citizens and support law enforcement operations.
Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
Each of us can help make the world a safer place. Join us!
The role:
In this role, you will delve into the world of cybercriminals, investigating a wide range of digital crimes. This role requires a sharp mind, attention to detail, and a strong technical background to identify, analyze, and counteract cyber threats. Your work will play a vital role in safeguarding our clients and the broader community against
cybercriminal activities.
Tasks to solve:
- Investigation of cyber incidents including phishing attacks, data theft, web server compromise, malware attacks, DDoS, etc.
- Collect and analyze digital evidence: logs, emails, servers and workstation images.
- Reconstruction of the incident chronology, TTPs of threat actors and their toolkit.
- Identify developers of malware and administrators behind the websites.
- Develop hypothesis and problem-solving skills.
- Cooperate with law enforcement agencies.
- Bachelor’s Degree in Computer Science, Cybersecurity or a related field (or equivalent work experience).
- 3 - 5 years of experience in cybersecurity.
- Strong interest in tackling non-standard, complex challenges in the realm of cybercrime investigation.
- Highly motivated, detail-orientated and patient when working on cybercrime cases.
- Fluency in English and Spanish is required.
- Research accounts on social networks.
- Understand Google Dorks.
- Ability to identify location based on photos (GEOSINT).
- Ability to correlate fraudulent URLs belonging to the same fraudulent campaign.
- Ability to correlate malware samples belonging to the same malware campaign.
- Experience in Windows and Linux – good understanding of how internet protocols work.
- Understanding how DNS works.
- Experience with web hosting and email servers.
- General understanding of databases, web servers, CMS.
- Good understanding on common web vulnerabilities and exploitation (with focus on remote code execution).
- Proficient in scripting in one of the following languages: Bash, PowerShell, or Python.
- Basic knowledge of binary exploitation and reverse engineering.
Why GROUP-IB?
- Your happiness is important to us: We want every single team member to be happy.
- Continuing professional development: At Group-IB, you can choose from various paths to growth: progress as an expert, advance to a management position, try your hand in another department, relocate abroad, or launch a new business area.
- Group-IB.A team with extensive international expertise: Do you have experience but are looking for exciting challenges? By choosing us, you will be choosing complex tasks and continuously improving your skills in a fast-growing international company.
- Globally recognized technologies: Group-IB's members are located in 25 countries, and our products and services are sold in 60 countries. What’s more, Gartner, IDC, and Forrester have ranked our technologies among the best in their class. We work with over 450 international partners and about 500 clients.
- A culture created by each of us: Group-IB’s employees speak many different languages and understand one another. We respect each other's beliefs, share common values, and strive toward the happiness of every employee.
- Economic stability: Group-IB's sustainable growth helps rapidly develop careers that would take years to progress as far as most other companies.
What else should you know:
- Flexible schedule: Group-IB does not have fixed working hours. You choose your schedule. We adhere to the principle advocated by Steve Jobs: “We have to work not 12 hours and head. ”Health: If anything goes wrong, don’t worry — we offer health insurance.
- Certificates and training courses: Group-IB specialists hold over 1,000 professional certificates, including CEH, CISSP, OSCP, GIAC, MCFE, BSI, as well as some rare ones that would be a source of pride for experts in forensics, penetration testing, and reverse engineering worldwide. We have an incentive program that helps employees achieve certifications at the company's expense.
- Challenges: A wide selection of GIB programs helps you improve soft skills, gain new competencies, and receive monetary rewards.
- The initiative is rewarded: At Group-IB, you can bring your most daring ideas to life. The company encourages technical blogging, writing articles, building sports teams, and other creative activities.
