Jobs at Group-IB

Manage and grow partner ecosystem for Group-IBs Unified Risk Platform. Oversee partner lifecycle, handle renewals, record interactions in Salesforce, execute partner development including cold outreach and negotiations, coordinate cross-functional compliance and integrations, share actionable threat intelligence, support joint takedowns and investigations, and represent the company at industry events.

Plan and execute regional B2B marketing initiatives for Central Asia: events, channel/partner campaigns, localized content (Russian/CIS), ABM, email marketing, social strategy, and analytics to drive awareness and pipeline.

Research and analyze LATAM-region cyber threats and threat actors (IOCs, TTPs, darkweb activity). Create detection content, document detections in the Threat Intelligence platform, produce context-rich alerts, and recommend mitigations using MITRE ATT&CK mappings.

Deploy, configure, and maintain Group-IB XDR and BEP across on-premises and hybrid enterprise environments. Install and integrate servers, hypervisors, and network components; manage traffic sources and email integrations; perform diagnostics, log and packet analysis; support pilots and production rollouts (remote and onsite); escalate complex issues to Product and R&D; prepare technical documentation and communicate progress to customers in English and Arabic.

Lead pre-sales technical engagements for Group-IB in Turkey: architect and deliver PoCs, design HLD/LLD, build BOQs, respond to RFIs/RFPs, present solutions, align implementations to client use-cases, and support sales, product, and marketing for XDR and Threat Intelligence solutions.

Own and grow cybersecurity sales in Malaysia: hunt new business, manage accounts and forecasts, close multiple opportunities, build long-term relationships with key accounts, and educate prospects on Group-IB threat-intelligence and anti-fraud solutions. Engage C-level and technical specialists and travel extensively.

Lead onboarding, drive adoption, and manage customer relationships for Group-IB products. Plan and execute project workplans, provide support and training, handle incidents, gather feedback, run satisfaction surveys, maintain project databases, and improve internal processes to ensure customer success and retention.

Provide senior legal support embedded in the DRP/CERT team, owning takedown and pre-trial enforcement across jurisdictions. Draft and maintain enforcement frameworks (cease-and-desist, UDRP, DMCA/EUCD, registrar/host complaints), build jurisdictional playbooks and new legal services, advise analysts, support sales intake, and drive legal projects using AI tooling for research and jurisdictional analysis.

Monitor and analyze web resources for security threats; investigate and respond to phishing, fraud, trademark and copyright abuse; collaborate with hosting providers, registrars, and authorities to take down malicious resources; support clients protecting brands; prepare client reports; research emerging scams and improve detection.

Manage customer onboarding, training, and regular check-ins for the Unified Risk Platform. Resolve technical issues end-to-end, drive product adoption, maintain project plans, monitor account health, collect feedback, run satisfaction surveys, spot risks early, and identify expansion and renewal opportunities while collaborating with internal teams to improve customer experience.

Monitor web resources, detect and analyze phishing, scams, trademark and copyright abuse; coordinate takedowns with hosts/registrars/authorities; support clients, produce incident reports, and research new threat techniques to improve detection and prevention.

Drive and grow UK sales for Group-IB cybersecurity and fraud protection solutions. Manage and expand accounts, hunt new business, develop channel partnerships, run outbound campaigns, qualify leads, maintain CRM, and produce accurate forecasts while collaborating with Sales, Partner Channel, and Marketing.

Manage and expand partner ecosystem for Group-IB's Unified Risk Protection. Oversee partner lifecycle, maintain records in Salesforce, perform cold outreach, close partnerships, coordinate joint investigations and takedowns, share threat intelligence, collaborate with Product/Legal/Security, and represent the company at industry events.

Conduct defensive and offensive security research, design and deliver training and course materials, create practical lab tasks, publish technical content, speak at conferences, and collaborate with IT communities to support clients and expand threat-hunting capabilities.

Design and build ML models (classical, neural, graph) to detect transactional fraud and AML scenarios; perform research and experimentation, develop production-ready Python code, integrate models into the fraud protection platform, and document results.

Design, implement, and own high-load backend services and APIs in Go. Build integrations with third-party data sources, improve performance and scalability (query optimizations, sharding), increase Go service adoption, integrate across product ecosystem, and develop/maintain internal platforms with production-grade reliability and observability.

Design, maintain, and execute test configurations and automation frameworks. Reproduce, verify, and resolve defects, generate test reports, analyze ELK event logs, and test backend integrations (APIs, MQ, databases) for high-load systems to improve system stability and reliability.

Drive new business and grow existing accounts in Italy (and Germany), develop IT channel partnerships, run outbound campaigns, manage leads/CRM, and forecast sales for Group-IB cybersecurity solutions.

Serve as the primary technical authority for DFIR incidents, providing 24/7 escalation, hands-on forensics (Windows, Linux, memory), technical direction, QA of reports, mentorship, research/academic contribution, cross-functional coordination, onsite support, and process/project planning for regional incident response teams.

Analyze suspicious events and user sessions for fraud, develop and improve detection methods, support fraud investigations and customers, prepare reports, and contribute to digital identity protection system development.