Cybersecurity Engineer

Responsibilities

• Design advanced detection scenarios based on the TTPs of APT groups and cybercriminals
• Define and maintain the repository of indicators of compromise (IoCs) derived from OSINT, the dark web, and partner sources
• Evaluate and integrate new intelligence feeds and cyber threat monitoring solutions
• Contribute to the development of incident response playbooks and SIEM/EDR use cases
• Support employee awareness campaigns on security best practices
• Monitor alert streams in real time and enrich investigations with relevant IoCs
• Perform in-depth technical analysis of ongoing attacks
• Continuously collect and analyze information from open, closed, and partner sources
• Participate in on-call rotations and technical crisis committees for major incidents
• Write and distribute intelligence reports, threat bulletins, and post‑incident (RETEX) analyses

Requirements

• 5 years of experience in demanding operational cybersecurity environments
• Strong command of investigation methodologies (threat hunting, log analysis, behavioral analysis)
• Expertise in OSINT collection and exploitation, and in analyzing the TTPs of APT groups and cybercriminals
• Solid knowledge of IoCs and threat intelligence sharing formats (STIX/TAXII, MISP)
• Hands‑on experience with SOC tools (SIEM such as Splunk/QRadar, EDR such as CrowdStrike/SentinelOne)

Core Competencies

Demonstrates expertise in advanced threat detection, incident response, and cybersecurity methodologies, with a strong focus on OSINT collection and analysis of APT group TTPs. Proficient in utilizing SOC tools and maintaining threat intelligence repositories to enhance security operations.