Cyber Threat Investigator İş İlanı

Who is NetKoruma? NetKoruma is a cybersecurity company specializing in Digital Risk Protection, Cyber Threat Intelligence, and online fraud prevention. We help organizations identify, analyze, and mitigate cyber threats targeting their brands, customers, employees, and digital assets across the surface, deep, and dark web. Our technology and cybersecurity operations continuously monitor the digital threat landscape to detect phishing attacks, fraudulent websites and applications, impersonation attempts, leaked credentials, compromised accounts, malicious domains, data breaches, and emerging threat actor activities. NetKoruma’s core capabilities include: Brand & Phishing Protection – Detection, investigation, and takedown of phishing websites, fake domains, fraudulent social media accounts, mobile applications, and other impersonation threats. Cyber Threat Intelligence – Monitoring threat actors, underground communities, data leaks, compromised credentials, and emerging cyber threats. Digital Fraud Intelligence – Identifying digital infrastructures and indicators associated with online fraud and financial crime. Threat Actor & Dark Web Monitoring – Tracking relevant threat actors, underground sources, and cybercriminal activity to provide early warning of potential threats. We primarily work with organizations operating in high-risk and highly regulated industries, including banking, financial services, fintech, payment systems, e-commerce, telecommunications, and other critical sectors. Our mission is simple: detect digital threats as early as possible and help organizations take action before those threats turn into real-world impact. About the Role Cyber Threat Hunter / Threat Intelligence Specialist We are looking for a Cyber Threat Hunter / Threat Intelligence Specialist who is passionate about investigating the cyber threat landscape, tracking threat actors and their activities, and transforming findings into actionable intelligence. The primary focus of this role will be to continuously monitor the global cyber threat ecosystem, identify emerging threats and threat actors, analyze their activities, and contribute to our threat intelligence capabilities. Key Responsibilities Monitor open and lawfully accessible sources, forums, communities, and digital channels where cyber threat actors are active. Track and analyze threat actors, cybercriminal groups, their publications, activities, and ongoing campaigns. Research emerging threat actors, attack techniques, infrastructure, and targeted industries. Monitor developments related to ransomware, phishing, infostealers, malware, credential theft, data breaches, and other cyber threats. Conduct threat intelligence research across relevant Deep Web and Dark Web sources. Continuously follow global cybersecurity news, security researchers, threat intelligence reports, and industry developments. Collect, validate, classify, and analyze information from multiple sources and transform findings into meaningful threat intelligence. Identify and analyze Indicators of Compromise (IOCs) and threat actor Tactics, Techniques, and Procedures (TTPs). Utilize frameworks such as MITRE ATT&CK to analyze and map threat actor behavior. Prepare cybersecurity news, blog posts, threat analyses, and intelligence reports for our website and social media channels. Translate complex technical findings into clear and understandable content for both technical and non-technical audiences. Identify significant or critical developments and promptly communicate relevant intelligence to internal teams. Qualifications Strong interest in cybersecurity, particularly Cyber Threat Intelligence (CTI), Threat Hunting, and OSINT. Strong internet research and OSINT capabilities. Familiarity with the Dark Web/Deep Web ecosystem and platforms commonly monitored for cyber threat intelligence. Understanding of common cyber threats such as phishing, ransomware, malware, infostealers, botnets, credential leaks, and data breaches. Ability to understand and investigate technical indicators such as IP addresses, domains, URLs, DNS records, WHOIS data, and file hashes. Strong analytical skills and the ability to validate information through multiple independent sources. Sufficient English proficiency to confidently follow technical publications, threat actor communications, cybersecurity research, and global industry reports. Strong written communication skills with the ability to turn research findings into clear and professional content. Curious, investigative, detail-oriented, and proactive mindset. Nice to Have Experience or knowledge in any of the following areas will be considered a plus: Cyber Threat Intelligence platforms Dark Web monitoring Threat actor profiling Malware and ransomware ecosystems MITRE ATT&CK IOC research and enrichment OSINT tools and methodologies Basic scripting or automation with Python or similar languages YARA, Sigma, or similar detection methodologies Previous experience writing cybersecurity blogs, research articles, or threat intelligence reports Who We Are Looking For We are looking for more than an analyst who simply reviews existing alerts. We want someone who is naturally driven to hunt for information, investigate emerging threats, and continuously explore the cyber threat landscape. Questions such as “What happened in the cyber world today?”, “What are threat actors currently discussing or publishing?”, “Which new attack techniques are emerging?”, “Which industries are being targeted?”, and “What does this development mean for our customers?” should naturally spark your curiosity. If you enjoy investigating, connecting information across multiple sources, following threat actors, and turning raw information into valuable intelligence, we would like to hear from you.