Cyber Threat Intelligence Analyst – LATAM

About the role

Group-IB is seeking a Cyber Threat Intelligence Analyst to join its Cybercrime Research team, focusing on threats affecting the LATAM region. The analyst will investigate actors on the dark web and open sources, produce actionable intelligence, and help shape the regional threat landscape.

Key responsibilities

• Analyze IOCs and TTPs of LATAM threat actors, including banking trojans, remote access trojans, and related malware.
• Craft, maintain, and document detection opportunities within the Threat Intelligence platform.
• Manage detailed information on threat actors' tactics, techniques, procedures, and operational security.
• Correlate data to create context‑rich alerts for customers.
• Research current threats and industry trends specific to the LATAM region.
• Drive initiatives to create detection content from threat hunts and ad‑hoc opportunities.
• Develop mitigation and countermeasure strategies based on collected intelligence.
• Map observed activities to the MITRE ATT&CK framework.

Required profile

• A genuine passion for investigating cybercrime and mitigating its impact.
• Strong interest in the LATAM threat landscape.
• Knowledge of global and local cyber threats such as ransomware, banking trojans, remote access trojans, and fraudsters.
• Experience profiling threat actors and analyzing cybercrime communities.
• Deep understanding of the dark‑web ecosystem and major platforms.

Required skills

• Familiarity with the MITRE ATT&CK taxonomy.
• Experience with threat intelligence platforms.
• Ability to analyze Indicators of Compromise (IOCs) and Tactics, Techniques, and Procedures (TTPs).
• Proficiency in dark‑web research and threat actor profiling.