Threat Researcher (M/F/X) - Remote Anywhere In Italy

Threat Researcher (m / f / x) - Remote anywhere in Italy

Team: Research

Founded in 2020, QuoIntelligence is Europe's fastest growing startup in the field of Cyber Threat Intelligence. Headquartered in Germany, and incorporated in Italy and Spain, we provide companies and institutions with game-changing expertise in the fight against cybercrime.

Responsibilities

1. Detect, investigate, track, and report on regional and industry focused malicious cyber activities, being able to track and report on shifts in TTPs over time, as well as their immediate impact on our customers.
2. Respond in a timely manner to requests for intelligence (RFIs) from customers, ranging from threat landscapes, risk assessments, OSINT investigations, campaign analysis, or technical analysis, and support in the development of those RFIs to junior analysts.
3. Create reports in English based on research discoveries, publishing those findings in QuoIntelligence blog or ad hoc conferences.
4. Support the fulfillment of client’s intelligence requirements.
5. Identify new datasets to ingest and propose new analytics which can be developed to improve and/or automate portions of the intelligence cycle.
6. Work with the Intelligence Operations team to identify, prioritize, and deploy various detection mechanisms for malware families and threat actor groups of interest.
7. Use both internal and external data to find the best and most comprehensive answer to threat research questions.
8. Use both quantitative and qualitative methods of analysis to best answer high-priority research questions around threats.
9. Support in the automation of tasks of the Intelligence Operations team in ad-hoc cases.

Minimum Requirements

1. Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Security Studies, Intelligence, or a related field. Alternatively, 4 additional years of experience in a similar role.
2. 3 years of experience in Information Security, particularly Threat Intelligence, Incident Response, Security Operations, Vulnerability Management.
3. Demonstrable research and analytic competencies such as blog posts, conferences, or research projects.
4. Good knowledge of the EU threat landscape and cyber threat activity, including actors, TTPs, and targets.
5. Experience clustering and tracking multiple threat actors using techniques such as the Diamond Model of Intrusion Analysis.
6. Knowledge of indicators of specific threat actors, their cross-platform tactics, and how they evolve or change over time.
7. Good knowledge of the different types of malwares and how they operate.
8. Ability to create detection rules, and good knowledge of Indicators of compromise (IOCs).
9. Excellent critical thinking and interpersonal skills; ability to work with globally distributed team members and autonomy carrying out research.
10. Fluency in English.
11. Current holder of an EU Passport or authorized to work in Italy/Spain.

Compensation

Since December 2022, we operate a transparent compensation framework. For this job and country, the base salary is 46,645.45€.

Benefits

1. Work from anywhere in Italy!
2. 26 days of paid time off.
3. Yearly global meetups in great locations.

Recruitment Process

1. You apply and fill a couple of screening questions.
2. We review all applications.
3. We invite you to an interview with our People Team via MS Teams.
4. You work on an online assessment via Vervoe.
5. We schedule the top 4-5 candidates with our Head of Intelligence Operations as well as our CEO.
6. We make an offer and conduct background checks via Veremark.

QuoIntelligence is an equal opportunity employer. We strongly believe that diversity is essential for good intelligence work and are committed to creating an inclusive environment for all employees.