Group-IB jobs, judged for you, free

What they do

Group-IB makes cybersecurity technology to investigate, predict, prevent, and fight digital crime. Its Unified Risk Platform covers threat intelligence, fraud protection, and managed detection and response. It also runs incident response and crime investigations. Founded in 2003, it says that it has 600+ enterprise customers. Police agencies such as INTERPOL and Europol use its technology.

What they value

• The mission: fight cybercrime and make the world safer.
• Real impact in the fight against cybercrime, not a 9-to-5 approach.
• Boldness, innovation, and passion to win.
• Continuous development: become an expert, lead, go global, or innovate.
• Local experts who know the language, law, and threats of their region.
• An international team, with people from many countries and languages.

Where they hire

Roles are in Cairo, Indonesia, Tashkent, Saudi Arabia, and the UAE. Others are in Italy, Amsterdam, Singapore, Madrid, Istanbul, Thailand, Colombia, and Qatar. 7 of 29 roles are remote, in sales, presales, and engineering. No posting mentions visa sponsorship or the right to work. Postings say that staff can move to another of its centers.

Teams and roles

The board has 29 roles. Sales and presales is the largest group, with 10 roles.

• Sales: business development managers for the UAE, Indonesia, Italy, and Colombia, a channel manager for Eastern Europe, and a sales development representative for Australia and New Zealand.
• Presales engineers: for Istanbul, Thailand, Japan, and South Korea. They run demos and trials, and install the products for clients.
• Development: six senior DevOps engineers, some remote and some in the Middle East and Tashkent, and a remote senior Go developer.
• CERT analysts in Indonesia, Tashkent, and Cairo: they watch websites for threats to clients. A CERT is a team that responds to security incidents.
• Services: digital forensics and incident response (DFIR) consultants in Cairo and Riyadh, a red team specialist in Saudi Arabia, and an implementation engineer in Cairo.
• Product: a head of product for cyber intelligence, in Amsterdam, Singapore, Madrid, or the UAE.

What they look for

DevOps roles ask for four or more years of Linux, DevOps, or site reliability work. They ask for Kubernetes, physical servers, and tools such as Ansible or Puppet. The Go developer role asks for five or more years of Go, and SQL with PostgreSQL.

Security roles ask for hands-on attack and defense skills. DFIR consultants need five or more years of incident response and forensics. The red team role asks you to write your own tools in a language such as Python, Go, or C, and for proof such as bug bounties or capture-the-flag contests. Presales roles ask for five years in cybersecurity, and knowledge of networks and endpoint security.

Most roles ask for fluent English. Regional roles also need the local language, such as Arabic, Turkish, Italian, or Spanish. Group-IB pays for professional certifications such as CISSP and OSCP.