Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations.
Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
About The RoleThis role combines deep technical expertise with real impact on customers’ cybersecurity resilience. As part of Group-IB’s global delivery team, you will be at the forefront of deploying and maintaining cutting-edge threat detection technologies - Group-IB XDR and Group-IB BEP - across complex enterprise infrastructures. You will directly influence the security posture of major clients by ensuring flawless product operation, leading implementations, and resolving incidents in real time. This position is ideal for those who enjoy hands-on work with modern cybersecurity stacks, servers, network infrastructure, and virtualization platforms, while continuously collaborating with R&D, Product, and Threat Intelligence teams.
YOUR MISSION
- Deploy and configure Group-IB XDR and Group-IB BEP for enterprise customers (on-premises and hybrid environments).
- Conduct installation, integration, and initial configuration of servers, hypervisors, and network components.
- Perform system diagnostics, troubleshoot hardware and software issues, and ensure platform stability.
- Manage network and email traffic sources (SPAN, TAP, SMTP, O365, Google Mail, etc.) for product integration.
- Collect and analyze logs, traffic captures, and system data to identify and resolve operational issues.
- Support pilots and production rollouts, including remote and on-site assistance.
- Collaborate with Group-IB Product and Development teams to escalate and reproduce complex issues.
- Prepare technical documentation and communicate implementation progress to customers in English.
- Maintain high customer satisfaction by providing timely, professional, and effective technical support.
What We Are Looking For
- * Strong hands-on experience with Linux (Arch/Ubuntu) and Windows Server administration.
- Confident understanding of networking fundamentals: TCP/IP, VLANs, SPAN/RSPAN, GRE, VPN, routing, DHCP, DNS, ARP, and TCP flags.
- Practical knowledge of firewalls (iptables, nftables, UFW, Windows Firewall).
- Experience with OpenVPN, WireGuard, and secure remote access configuration.
- Experience with virtualization platforms (ESXi, Hyper-V): VM deployment, networking, and export.
- Proficiency with diagnostic tools (tcpdump, Wireshark, curl, openssl) and log analysis (journalctl, Event Viewer).
- Ability to write and execute scripts in Bash and PowerShell.
- Understanding of email infrastructure: MX records, SPF, DKIM, DMARC, and mail routing. Familiarity with Active Directory, GPO management, and SSH configuration.
- Experience working with issue-tracking systems (JIRA).
- English level: B2 or higher — both spoken and written, with confidence in technical communication.
- Native-level proficiency in Arabic (both written and spoken), with strong business and technical communication skills.
What Sets You Apart
- * Knowledge of microservice vs monolithic application architecture.
- Understanding of IPMI (iDRAC/iLO) and BIOS setup for server provisioning.
- Ability to perform basic hardware replacement (memory, RAID controller, NIC).
- Strong analytical mindset and structured approach to troubleshooting.
- Readiness for occasional business travel to customer sites.
- A passion for cybersecurity and continuous learning in the field of threat detection and response.
Core Competencies
- * Strong problem-solving mindset and attention to detail.
- Ability to structure complex information and communicate it clearly to both technical and non-technical audiences.
- High sense of ownership and accountability for assigned projects.
- Adaptability and composure when working under pressure or during critical incidents. Customer-oriented approach and willingness to go the extra mile to resolve issues.
- Team player with strong collaboration and communication skills.
- Curiosity and continuous drive for professional growth in cybersecurity.
WHY CHOOSE GROUP-IBGroup-IB is a global leader in cybersecurity technologies that investigate, predict, prevent, and fight digital crime. We help organizations reduce risk and protect trust. Trusted by governments, major industries, and law enforcement, we deliver adversary-focused, predictive threat intelligence and cyber fraud fusion solutions that detect, analyse, and mitigate regional and country-specific digital crimes.
- Work with real stakes. Group-IB investigates active cybercriminal groups, responds to breaches affecting critical infrastructure, and develops technologies used by law enforcement agencies including INTERPOL, Europol, and Afripol across 60+ countries. We've conducted 1,550+ cybercrime investigations alongside 600+ enterprise customers globally. When you join Group-IB, your work directly disrupts digital crime.
- Grow your way. Choose your own path: deepen your craft as a technical expert, step into leadership, move across to another team, or relocate to one of our Digital Crime Resistance Centers across the Americas, Europe, the Middle East & Africa, Central Asia, and the Asia-Pacific. Your growth is our growth — Group-IB's expansion across 60+ active country operations means real career acceleration.
- We fund professional certifications at company expense — whether you're pursuing CEH, CISSP, OSCP, or specialized certifications in forensics and penetration testing. You don't have to choose between doing the job and advancing your credentials.
- Work alongside industry leaders. Our Unified Risk Platform — Threat Intelligence, Digital Risk Protection, Attack Surface Management, Managed XDR, and more — is recognized by Gartner, Forrester, KuppingerCole, and Datos Insights. Frost & Sullivan named us a 2025 Global Technology Innovation Leader. When you work here, you're building technologies that set the industry standard.
- Real challenges, real expertise. You'll take on complex, real-world problems alongside adversary-centric researchers and incident response experts spread across six continents. We've built 21+ years of proprietary telemetry through 1,500+ joint investigations. No two threats look alike — and neither do the skills you'll develop.
- A team that is genuinely international. Our people come from different countries, speak different languages, and bring different perspectives. What connects us is a shared mission: fighting cybercrime and making the world safer. We care about your wellbeing and happiness as much as your output.
