Jobs at Group-IB

Lead end-to-end digital forensics and incident response engagements across Latin America, serving as the primary client technical contact. Conduct host, cloud, identity, network, log, threat-hunting, and malware investigations across Windows, Linux, macOS, AWS, Azure/Entra, and GCP. Deliver bilingual Spanish-English reports and executive briefings, review team output, develop investigative tooling and methodologies, and contribute to research and publications.

Lead end-to-end digital forensics and incident response engagements across Latin America, serving as the client’s technical lead. Investigate endpoint, cloud, identity, and network compromises; conduct host forensics, log analysis, threat hunting, and malware triage. Produce bilingual Spanish-English reports and executive briefings, review colleagues’ work, develop investigation tooling and methodologies, and contribute to cybersecurity research, publications, and public speaking.

Lead end-to-end digital forensics and incident response engagements across Latin America, serving as the client’s technical lead. Investigate endpoint, cloud, identity, and network compromises across Windows, Linux, macOS, AWS, Azure/Entra, and GCP. Conduct host forensics, log analysis, threat hunting, and malware triage; coordinate analysts; review deliverables; brief executives and regulators in Spanish and English; and develop investigative tooling, methodologies, and research.

Lead end-to-end digital forensics and incident response engagements across Latin America. Investigate endpoint, cloud, identity, and network compromises; perform host forensics, log analysis, threat hunting, and malware triage. Coordinate analysts, communicate with clients and executives in Spanish and English, produce defensible reports, review team work, and develop investigative tooling and methodologies. Contribute to cybersecurity research, publications, public speaking, and responsible LLM integration.

Lead end-to-end digital forensics and incident response engagements across Latin America, investigating endpoint, cloud, identity, and network compromises. Conduct host forensics, log analysis, threat hunting, and malware triage across Windows, Linux, macOS, AWS, Azure, and GCP. Manage client relationships, coordinate analysts, deliver Spanish and English reports and executive briefings, review quality, and develop investigative tooling and methodologies.

Process and register accounting documents, perform bookkeeping in QuickBooks and 1C, reconcile bank accounts and intercompany balances, prepare reports and financial statements, support auditors and the Chief Accountant.

Manage and expand technical partner ecosystem for Group-IB's Unified Risk Protection. Oversee partner lifecycle, maintain Salesforce records, execute outreach and negotiate alliances, coordinate joint threat intelligence and takedowns, collaborate with product/legal/security, and represent the company at industry events.

Operate, maintain, and scale high-availability infrastructure across bare-metal, containers, VMs and cloud. Manage core services (Nginx, CI/CD, artifact registries), automate via IaC and scripting, administer Kubernetes and distributed databases, implement observability and alerts, resolve infrastructure incidents, and collaborate with cross-functional teams to design fault-tolerant, secure, high-performance systems.

Maintain and scale global infrastructure (bare-metal, LXC, VMs, cloud). Operate core services (Nginx, GitLab, Artifactory), manage IaC and Kubernetes, handle incidents, monitor performance with observability tools, and design high-availability, fault-tolerant systems in collaboration with cross-functional teams.

Research and analyze LATAM-region cyber threats and threat actors (IOCs, TTPs, darkweb activity). Create detection content, document detections in the Threat Intelligence platform, produce context-rich alerts, and recommend mitigations using MITRE ATT&CK mappings.

Conduct regional LATAM cyber threat research, analyze IOCs and TTPs, profile threat actors, map activity to MITRE ATT&CK, create detection content and alerts, and develop mitigation strategies using internal and external intelligence sources.

Manage and grow partner ecosystem for Group-IBs Unified Risk Platform. Oversee partner lifecycle, handle renewals, record interactions in Salesforce, execute partner development including cold outreach and negotiations, coordinate cross-functional compliance and integrations, share actionable threat intelligence, support joint takedowns and investigations, and represent the company at industry events.

Manage and expand Group-IB’s technical partner ecosystem across its Unified Risk Platform. Responsibilities include vendor and partner lifecycle management, renewals, negotiations, Salesforce pipeline tracking, cold outreach, alliance development, agreement coordination with legal and security teams, threat intelligence sharing, joint investigations, takedowns, and industry event representation. The role requires cybersecurity knowledge, technical integration understanding, strong relationship-building skills, organization, persistence, and travel for events.

Manage and expand technical partner ecosystem for Group-IB URP. Oversee vendor lifecycle, negotiate agreements, maintain Salesforce records, drive joint threat intelligence/takedown collaborations, and represent the company at industry events.

Drive U.S. revenue growth in financial services by generating high-value opportunities, building senior relationships, developing partners and ecosystems, leading greenfield account acquisition, managing pipeline/CRM, and positioning Group-IBs end-to-end cyber-enabled fraud prevention solutions.

Support pre-sales and delivery in South Korea: consult with clients, design and customize cybersecurity solutions, run demos/POCs/technical workshops, assist deployments and configuration, provide threat detection/incident response expertise, and deliver technical training and documentation.

Design and build production-grade analytical services and ETL pipelines to detect fraud. Analyze session and network data, develop and integrate ML models and AI agents, implement predictive scoring, and produce research-backed documentation and presentations.

Drive strategic sales growth across the UAE (focus Abu Dhabi), build senior government and partner relationships, generate pipeline, position Group-IB cybersecurity solutions, collaborate with regional teams, and manage forecasting, CRM, and consultative engagements for public sector and critical infrastructure clients.

Serve as the primary technical authority for DFIR incidents, providing 24/7 escalation, hands-on forensics (Windows, Linux, memory), technical direction, QA of reports, mentorship, research/academic contribution, cross-functional coordination, onsite support, and process/project planning for regional incident response teams.

Lead onboarding, drive adoption, and manage customer relationships for Group-IB products. Plan and execute project workplans, provide support and training, handle incidents, gather feedback, run satisfaction surveys, maintain project databases, and improve internal processes to ensure customer success and retention.