Job Opportunities API

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations. Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.   ABOUT THE ROLE: The Technical Lead will act as the primary technical anchor and initial escalation point during complex cybersecurity incidents. Led by a Regional Head, this role is deeply rooted in 24/7 technical excellence and cross-domain coordination. You will guide the technical direction of the team, provide extensive quality assurance, and drive the skill-up and professional growth of team members. This is a highly specialized, purely technical career path. It explicitly does not include team management, disciplinary leadership functions, or the responsibility to drive the overarching strategic vision of the DFIR teams. You are the ultimate technical authority, not the administrative manager. The DFIR vision: Our ultimate goal is to fight cybercrime by constantly learning and staying one step ahead of the attackers. We do not just solve isolated puzzles; we bring different security experts together to build a complete and strong defense. By handling a large volume of cases, we gain real, practical experience that makes us better every day. Instead of just handing our clients a confusing list of technical data or "homework," we focus on providing clear, actionable answers that explain exactly what happened and what it means for their business. Furthermore, we are constantly researching and looking ahead to ensure we are fully prepared for the future of automated cyber threats   YOUR MISSION: Normal DFIR Duties (24/7 Service) Provide continuous 24/7 service, which includes working on weekends. Conduct onsite engagements to support clients directly in critical situations. Apply hands-on technical expertise in default forensics fields: Windows, Linux, and Memory. Operate under the strategic guidance and leadership of a Regional Head. Specific Technical Lead Duties: Incident Management & Technical Direction: Lead the technical direction during high-stakes cybersecurity incidents. Act as the initial escalation point for the team and the clients. Support the team in resolving challenging, complex, and non-discrete problems. Make sound decisions with incomplete data, constantly balancing analytical depth versus the speed of response. Research & Technological Foresight: Actively engage in academic research and encourage the publication of papers and articles to drive the industry forward. Stay up-to-date with the continuous adaptation of new technologies and modern methodologies. Maintain a deep understanding of emerging tech, such as integrating and properly automating non-deterministic systems like LLMs into the investigative workflow. Provide research advisory to guide the team's investigative and academic efforts. Mentorship & Team Growth: Actively drive the skill-up and professional growth of DFIR team members. Provide research advisory to guide the team's investigative efforts. Offer speaking and presenting advisory to help team members communicate their findings effectively. Leverage your training and education experience to elevate the team's capabilities. Quality Assurance & Technical Depth: Maintain a technical deep-dive expertise in at least one specific forensics-related field. Support Quality Assurance by reviewing technical documents,