Threat Research Analyst

Company Description Are you passionate about cybersecurity research and uncovering sophisticated attack patterns? We are looking for a Threat Research Analyst to join a remote team working on advanced application protection solutions for a global Customer in the cybersecurity domain.

In this role, you will investigate suspicious activity, analyze attack vectors, and help improve detection and blocking mechanisms for modern web applications. You will work with monitoring systems, behavioral analytics, and threat intelligence data to proactively identify emerging threats and strengthen platform security.

We at Sigma Software offer the opportunity to work on impactful security products, collaborate with experienced professionals, and grow your expertise in modern cybersecurity technologies while working remotely within European time zones.

CUSTOMER Our Customer is a global cybersecurity company delivering comprehensive security solutions for businesses, organizations, and digital ecosystems. Operating across multiple industries, the company focuses on preventing cyber threats, identifying vulnerabilities, and protecting web applications from sophisticated automated attacks.

PROJECT The project is focused on building a security platform that safeguards applications from automated attacks and malicious traffic. The Threat Research team investigates emerging attack techniques, analyzes suspicious behavioral patterns, and develops detection and blocking mechanisms to improve overall protection capabilities.

As part of the team, you will work with logs, dashboards, threat intelligence data, and monitoring systems to uncover new attack vectors and enhance application security in real-world environments.

Job Description

• Monitor existing threats and investigate suspicious activities using logs, dashboards, and detection systems
• Analyze attack patterns and build detailed threat scenarios based on collected data
• Research and respond to reported threats, Customer escalations, and security incidents
• Improve detection and blocking mechanisms for automated attacks and malicious behaviors
• Analyze intelligence from competitors, public sources, and industry trends to identify emerging threats
• Work with monitoring and analytics tools such as Kibana and Elasticsearch
• Collaborate with engineering and security teams to improve product protection capabilities
• Document findings, attack methodologies, and investigation results

Qualifications

• At least 3 years of commercial experience in cybersecurity, threat research, or related areas
• Strong hands-on experience with SQL
• Practical experience with Kibana and understanding of Elasticsearch
• Experience with prompt engineering and chatbot-related technologies
• Strong understanding of how modern web applications work end-to-end
• Good understanding of attacker behavior, threat detection, and alerting systems
• Knowledge of browser APIs, browser security policies, and HTTP/HTTPS protocols
• Understanding of front-end concepts including DOM, events, XHR, and WebSockets
• Proficiency with HTML and CSS
• Basic JavaScript knowledge
• Basic knowledge of SQL and NoSQL databases
• Familiarity with networking concepts including TCP/IP, DNS, and VPNs
• Ability to troubleshoot system and network-related issues
• Upper-Intermediate English level or higher

WILL BE A PLUS

• Python scripting skills
• Experience building crawlers or scrapers
• Deobfuscation and reverse engineering experience
• Experience with monitoring and observability tools such as Imply or Datadog
• Previous experience in cybersecurity, fraud prevention, or threat intelligence domains

Additional Information

PERSONAL PROFILE

• Strong analytical and investigative mindset
• Attention to detail and ability to identify unusual behavioral patterns
• Curiosity about cybersecurity threats and attacker techniques
• Ability to work independently in a fast-paced environment
• Strong communication and collaboration skills
• Proactive approach to problem-solving and continuous learning