Jobs at Group-IB

Leads the Cyber Intelligence product portfolio, owning multi-year strategy, annual roadmaps, investment and sunset decisions, discovery standards, pricing and packaging, product health metrics, and commercial alignment. Manages and develops Product Managers, partners with engineering, sales, marketing, and regional leadership, and translates customer and market evidence into product decisions. Requires cybersecurity or cyber threat intelligence domain expertise and experience leading product portfolios and teams.

Lead complex digital forensics and incident response investigations from scoping through reporting. Perform hands-on Windows, Linux, and memory forensics; investigate ransomware and targeted intrusions; advise on containment; and communicate findings to technical and executive audiences. Serve as the shift escalation point, review reports, mentor junior specialists, develop playbooks and detection ideas, improve investigative tooling, and participate in a 24/7 service rotation with onsite client travel during critical incidents.

Lead complex digital forensics and incident response investigations from triage through reporting. Conduct hands-on Windows, Linux, and memory forensics; investigate ransomware and targeted intrusions; advise on containment; and communicate findings to technical and executive audiences. Serve as the first escalation point, review colleagues’ work, mentor junior responders, develop playbooks and detection ideas, and improve investigative tooling. Participate in a 24/7 rotation and travel onsite for critical client incidents.

Leads cybersecurity sales growth in Colombia by developing sales strategies, managing pipelines, generating and closing opportunities, negotiating contracts, and achieving revenue targets. Builds client relationships, positions Group-IB as a trusted cybersecurity advisor, analyzes market and sales performance, forecasts revenue, maintains CRM records, and collaborates cross-functionally. The role also involves leading, coaching, and motivating sales team members while ensuring customer satisfaction.

Build, maintain, and scale highly available infrastructure across bare-metal, containerized, virtualized, and cloud environments. Manage core services, infrastructure as code, Kubernetes workloads, distributed databases, monitoring, and observability platforms. Resolve infrastructure incidents, improve reliability and performance, and design fault-tolerant systems. Collaborate with network engineers, developers, and other technical stakeholders to evolve secure, scalable infrastructure.

Build, maintain, and scale highly available infrastructure across bare-metal, container, virtual machine, and cloud environments. Manage Kubernetes, configuration management, IaC, distributed databases, monitoring, observability, and core infrastructure services. Resolve incidents, improve reliability and performance, and design fault-tolerant systems while collaborating with network, development, and other technical teams.

Monitor and investigate online security threats, including phishing, fraud, trademark misuse, piracy, and scams. Coordinate takedowns with website owners, hosting providers, domain registrars, and authorities. Support client brand protection, prepare reports, and research emerging attack techniques. The role requires strong analytical skills, cybersecurity awareness, English and Arabic fluency, and comfort working in multicultural remote teams.

Conduct red team engagements and advanced penetration testing to identify client vulnerabilities. Develop internal tools, scripts, and payloads; research attack techniques, vulnerabilities, and evasion methods; and contribute to engagement reports. The role requires strong operating system and networking knowledge, programming ability, offensive security experience, and familiarity with attacks against Active Directory, web applications, and network infrastructure.

Lead the strategy, roadmap, investment, pricing, packaging, and lifecycle of Group-IB’s Cyber Intelligence product line. Manage and develop Product Managers, set discovery standards, align product priorities with company objectives, partner with sales and regional leadership, and use customer, market, and win-loss insights to drive product decisions and commercial impact.

Lead the strategy, roadmap, pricing, packaging, discovery, and commercial direction for Group-IB’s Cyber Intelligence product line. Manage and develop Product Managers, prioritize investment and product retirement decisions, align product goals with company objectives, and partner with sales, engineering, marketing, customers, and senior leadership. Use customer evidence, win/loss analysis, and product-health metrics to guide portfolio decisions and improve adoption, retention, and commercial performance.

Leads the Cyber Intelligence product portfolio, owning multi-year strategy, annual roadmaps, investment decisions, discovery priorities, pricing, packaging, and product health. Manages and coaches Product Managers, aligns product priorities with company objectives, partners with sales and regional leaders, analyzes win/loss trends, and ensures products deliver customer and commercial value. Requires cybersecurity or cyber threat intelligence experience and strong product leadership.

Supports European sales and business operations by managing deal paperwork, contracts, Salesforce data, payment terms, reporting, scheduling, correspondence, onboarding, and partner documentation. Collaborates with legal, finance, and cross-functional teams to track deal progress, maintain accurate records, prepare accounting documents, and improve processes. Requires sales operations experience, strong administrative and communication skills, CRM and reporting proficiency, and fluency in Italian or German plus English.

Support cybersecurity presales and delivery activities in Thailand through client consultation, solution architecture, demos, proofs of concept, workshops, training, deployment, configuration, customization, and technical support. Analyze endpoint logs and network traffic, investigate incidents, perform threat detection and root cause analysis, and collaborate with customers and internal teams on tailored security solutions.

Design and implement backend product features, APIs, and third-party integrations in Golang. Improve performance and scalability of high-load, data-intensive systems; integrate services across the product ecosystem; and maintain internal platforms. Own work end to end, including requirements, testing, deployment, monitoring, and production maintenance. The role involves SQL and PostgreSQL, Linux environments, distributed systems, observability, and real-time data processing.

Leads B2B customer onboarding, product adoption, support, training, satisfaction tracking, and retention initiatives. Manages customer project plans, coordinates internal teams, handles incidents and non-standard inquiries, communicates product updates, conducts satisfaction surveys, maintains project and helpdesk databases, and improves internal customer experience processes. Requires networking and cybersecurity fundamentals, analytical reporting skills, strong communication, B2B account management experience, and fluent English and Arabic.

Analyze cyber threat indicators, tactics, techniques, procedures, threat actors, vulnerabilities, and attack infrastructure across the META region. Develop detection content, correlate intelligence into customer alerts, research emerging threats, create mitigation strategies, map activity to MITRE ATT&CK, and produce comprehensive threat reports for internal and external stakeholders.

Supports cybersecurity presales and delivery activities in Japan by advising clients, preparing technical documentation, conducting demos, proofs of concept, workshops, seminars, and training. Deploys, configures, and customizes security solutions, ensures performance, and provides technical support for threat detection, incident response, and remediation. Requires expertise in threat hunting, digital forensics, network and endpoint security, incident investigation, and enterprise infrastructure.

Develops cybersecurity business across Italy by managing customer accounts, hunting new opportunities, expanding IT channel partnerships, executing outbound campaigns, coordinating with sales and marketing teams, forecasting commercial activity, educating prospects, and maintaining accurate CRM records. The role requires cybersecurity vendor or systems integrator sales experience, strong communication and analytical skills, indirect-channel knowledge, and fluency in Italian and English.

Manage and expand cybersecurity channel partnerships across Eastern Europe, especially Adriatic and Northern Eastern European markets. Recruit MSSP and MDR partners, develop joint business plans, negotiate agreements, generate partner-sourced pipeline, coordinate marketing campaigns, enable partner training and certifications, track performance, manage forecasts, and support sales growth. The role requires deep indirect sales experience, security operations software expertise, regional market knowledge, and fluency in English plus Croatian or Slovenian.

Operate, maintain, and scale high-availability infrastructure across bare-metal, containers, VMs and cloud. Manage core services (Nginx, CI/CD, artifact registries), automate via IaC and scripting, administer Kubernetes and distributed databases, implement observability and alerts, resolve infrastructure incidents, and collaborate with cross-functional teams to design fault-tolerant, secure, high-performance systems.