Jobs at Group-IB

Design and implement backend product features, APIs, and third-party integrations in Golang. Improve performance and scalability of high-load, data-intensive systems; integrate services across the product ecosystem; and maintain internal platforms. Own work end to end, including requirements, testing, deployment, monitoring, and production maintenance. The role involves SQL and PostgreSQL, Linux environments, distributed systems, observability, and real-time data processing.

Develop and execute European demand generation, partner, account-based, event, and brand marketing strategies. Manage campaigns, budgets, events, and sales alignment to increase leads, pipeline, and customer expansion. Analyze performance, market trends, competitors, and campaign ROI, while collaborating with sales, global marketing, intelligence, and partner teams.

Conduct internal and external vulnerability assessments and penetration tests, identify security weaknesses, perform phishing and social engineering campaigns, and recommend mitigation measures. The role also involves cybersecurity research and development, assessing network, web, Active Directory, and cloud security, and applying scripting and exploitation techniques to support client security engagements.

Leads B2B customer onboarding, product adoption, support, training, satisfaction tracking, and retention initiatives. Manages customer project plans, coordinates internal teams, handles incidents and non-standard inquiries, communicates product updates, conducts satisfaction surveys, maintains project and helpdesk databases, and improves internal customer experience processes. Requires networking and cybersecurity fundamentals, analytical reporting skills, strong communication, B2B account management experience, and fluent English and Arabic.

Analyze cyber threat indicators, tactics, techniques, procedures, threat actors, vulnerabilities, and attack infrastructure across the META region. Develop detection content, correlate intelligence into customer alerts, research emerging threats, create mitigation strategies, map activity to MITRE ATT&CK, and produce comprehensive threat reports for internal and external stakeholders.

Supports cybersecurity presales and delivery activities in Japan by advising clients, preparing technical documentation, conducting demos, proofs of concept, workshops, seminars, and training. Deploys, configures, and customizes security solutions, ensures performance, and provides technical support for threat detection, incident response, and remediation. Requires expertise in threat hunting, digital forensics, network and endpoint security, incident investigation, and enterprise infrastructure.

Develops cybersecurity business across Italy by managing customer accounts, hunting new opportunities, expanding IT channel partnerships, executing outbound campaigns, coordinating with sales and marketing teams, forecasting commercial activity, educating prospects, and maintaining accurate CRM records. The role requires cybersecurity vendor or systems integrator sales experience, strong communication and analytical skills, indirect-channel knowledge, and fluency in Italian and English.

Manage and expand cybersecurity channel partnerships across Eastern Europe, especially Adriatic and Northern Eastern European markets. Recruit MSSP and MDR partners, develop joint business plans, negotiate agreements, generate partner-sourced pipeline, coordinate marketing campaigns, enable partner training and certifications, track performance, manage forecasts, and support sales growth. The role requires deep indirect sales experience, security operations software expertise, regional market knowledge, and fluency in English plus Croatian or Slovenian.

Process and register accounting documents, perform bookkeeping in QuickBooks and 1C, reconcile bank accounts and intercompany balances, prepare reports and financial statements, support auditors and the Chief Accountant.

Operate, maintain, and scale high-availability infrastructure across bare-metal, containers, VMs and cloud. Manage core services (Nginx, CI/CD, artifact registries), automate via IaC and scripting, administer Kubernetes and distributed databases, implement observability and alerts, resolve infrastructure incidents, and collaborate with cross-functional teams to design fault-tolerant, secure, high-performance systems.

Maintain and scale global infrastructure (bare-metal, LXC, VMs, cloud). Operate core services (Nginx, GitLab, Artifactory), manage IaC and Kubernetes, handle incidents, monitor performance with observability tools, and design high-availability, fault-tolerant systems in collaboration with cross-functional teams.

Support pre-sales and delivery in South Korea: consult with clients, design and customize cybersecurity solutions, run demos/POCs/technical workshops, assist deployments and configuration, provide threat detection/incident response expertise, and deliver technical training and documentation.

Drive strategic sales growth across the UAE (focus Abu Dhabi), build senior government and partner relationships, generate pipeline, position Group-IB cybersecurity solutions, collaborate with regional teams, and manage forecasting, CRM, and consultative engagements for public sector and critical infrastructure clients.

Serve as the primary technical authority for DFIR incidents, providing 24/7 escalation, hands-on forensics (Windows, Linux, memory), technical direction, QA of reports, mentorship, research/academic contribution, cross-functional coordination, onsite support, and process/project planning for regional incident response teams.

Sell Group-IB cybersecurity solutions across Germany: develop and grow customer accounts, hunt new business, build IT channel partnerships, execute outbound campaigns, manage leads and CRM, and forecast sales under guidance of sales leadership.

Conduct defensive and offensive security research, design and deliver training and course materials, create practical lab tasks, publish technical content, speak at conferences, and collaborate with IT communities to support clients and expand threat-hunting capabilities.

Provide senior legal support embedded in the DRP/CERT team, owning takedown and pre-trial enforcement across jurisdictions. Draft and maintain enforcement frameworks (cease-and-desist, UDRP, DMCA/EUCD, registrar/host complaints), build jurisdictional playbooks and new legal services, advise analysts, support sales intake, and drive legal projects using AI tooling for research and jurisdictional analysis.

Build, maintain, and scale high-availability infrastructure for global services. Manage bare-metal, containers, VMs, IaC, monitoring, and distributed databases. Operate core services, resolve incidents, collaborate cross-functionally, and design fault-tolerant, secure systems.

Maintain and scale global infrastructure: manage bare-metal servers, LXC, VMs and cloud; operate core services (Nginx, GitLab, registries); automate with IaC and scripting; administer Kubernetes and distributed databases; implement high-availability fault-tolerant systems; monitor performance and resolve infrastructure incidents while collaborating across teams.

Deploy, configure, and maintain Group-IB XDR and BEP across on-premises and hybrid enterprise environments. Install and integrate servers, hypervisors, and network components; manage traffic sources and email integrations; perform diagnostics, log and packet analysis; support pilots and production rollouts (remote and onsite); escalate complex issues to Product and R&D; prepare technical documentation and communicate progress to customers in English and Arabic.