Threat Research Analyst
Summary
Threat Research Analyst monitors and investigates threats, analyzes attack patterns, builds threat scenarios, and improves detection/blocking mechanisms using Kibana, Elasticsearch, and SQL while collaborating with engineering and security teams to protect against automated attacks.
- Monitor existing threats and investigate suspicious activities using logs, dashboards, and detection systems
- Analyze attack patterns and build detailed threat scenarios based on collected data
- Research and respond to reported threats, Customer escalations, and security incidents
- Improve detection and blocking mechanisms for automated attacks and malicious behaviors
- Analyze intelligence from competitors, public sources, and industry trends to identify emerging threats
- Work with monitoring and analytics tools such as Kibana and Elasticsearch
- Collaborate with engineering and security teams to improve product protection capabilities
- Document findings, attack methodologies, and investigation results
- At least 3 years of commercial experience in cybersecurity, threat research, or related areas
- Strong hands-on experience with SQL
- Practical experience with Kibana and understanding of Elasticsearch
- Experience with prompt engineering and chatbot-related technologies
- Strong understanding of how modern web applications work end-to-end
- Good understanding of attacker behavior, threat detection, and alerting systems
- Knowledge of browser APIs, browser security policies, and HTTP/HTTPS protocols
- Understanding of front-end concepts including DOM, events, XHR, and WebSockets
- Proficiency with HTML and CSS
- Basic JavaScript knowledge
- Basic knowledge of SQL and NoSQL databases
- Familiarity with networking concepts including TCP/IP, DNS, and VPNs
- Ability to troubleshoot system and network-related issues
- Upper-Intermediate English level or higher
WILL BE A PLUS
- Python scripting skills
- Experience building crawlers or scrapers
- Deobfuscation and reverse engineering experience
- Experience with monitoring and observability tools such as Imply or Datadog
- Previous experience in cybersecurity, fraud prevention, or threat intelligence domains
PERSONAL PROFILE
- Strong analytical and investigative mindset
- Attention to detail and ability to identify unusual behavioral patterns
- Curiosity about cybersecurity threats and attacker techniques
- Ability to work independently in a fast-paced environment
- Strong communication and collaboration skills
- Proactive approach to problem-solving and continuous learning