Threat Research Analyst

• Monitor existing threats and investigate suspicious activities using logs, dashboards, and detection systems
• Analyze attack patterns and build detailed threat scenarios based on collected data
• Research and respond to reported threats, Customer escalations, and security incidents
• Improve detection and blocking mechanisms for automated attacks and malicious behaviors
• Analyze intelligence from competitors, public sources, and industry trends to identify emerging threats
• Work with monitoring and analytics tools such as Kibana and Elasticsearch
• Collaborate with engineering and security teams to improve product protection capabilities
• Document findings, attack methodologies, and investigation results

• At least 3 years of commercial experience in cybersecurity, threat research, or related areas
• Hands-on experience in cybersecurity, threat detection, security research, threat hunting, anti-bot solutions, fraud and abuse detection, application security, or a closely related security domain.
• Strong understanding of attacker tactics, techniques, and behaviors, including methods used to evade, bypass, or modify attacks to avoid detection.
• Experience investigating suspicious or malicious activities, with a solid understanding of detection, alerting, and blocking mechanisms.
• Strong understanding of web technologies and architecture, including:
  • Client-server architecture
  • HTTP/HTTPS protocols
  • REST APIs and web services
  • Request/response lifecycle
  • Headers, cookies, sessions, and authentication mechanisms
• Understanding of browser technologies and experience investigating:
  • DOM structure and manipulation
  • Browser events
  • XHR and Fetch requests
  • WebSockets
  • Browser APIs
  • Browser security policies and controls
• Ability to read and analyze JavaScript code, identify application behavior, detect suspicious or incorrect logic, and understand potential remediation approaches. Deep JavaScript development expertise is not required.
• Working knowledge of HTML and CSS sufficient to investigate and understand web application behavior.
• Strong practical experience with SQL for data analysis, investigations, and working with large datasets.
• Hands-on experience using Kibana for log analysis, monitoring, and investigations.
• Solid understanding of networking fundamentals, including:
  • TCP/IP
  • DNS
  • VPN technologies
  • Proxies
  • Basic network troubleshooting
• Ability to independently investigate complex technical issues and correlate multiple data points to build a complete attack or incident scenario.
• Experience using AI-powered tools and chatbots for research and technical investigations, including the ability to write effective prompts and interpret results.
• Upper-Intermediate (B2) or higher level of English.

WILL BE A PLUS

• Understanding of Elasticsearch and its ecosystem.
• Python scripting and automation skills.
• Experience developing, analyzing, or investigating crawlers, scrapers, or browser automation tools.
• Experience with deobfuscation and/or reverse engineering techniques.
• Experience investigating bot traffic, automated attacks, scraping activity, credential stuffing, account takeover attempts, abuse, fraud, or similar threats.
• Experience with monitoring, analytics, and observability platforms such as Datadog, Imply, Splunk, Microsoft Sentinel, OpenSearch, or similar tools.

PERSONAL PROFILE

• Strong analytical and investigative mindset
• Attention to detail and ability to identify unusual behavioral patterns
• Curiosity about cybersecurity threats and attacker techniques
• Ability to work independently in a fast-paced environment
• Strong communication and collaboration skills
• Proactive approach to problem-solving and continuous learning