Job Description:

• Monitor Telegram, dark web forums, marketplaces, and IM platforms for threat indicators, leaks, and emerging actors
• Manage and optimize scraping operations to ensure continuous and efficient data collection
• Maintain and expand our internal threat intelligence sources and datasets
• Write and maintain Python scripts to automate data gathering, parsing, and enrichment tasks
• Identify and classify threat actors, campaigns, and TTPs (Tactics, Techniques, and Procedures)
• Correlate intelligence data with DeXpose’s modules (Dark Web Monitoring, Cybercrime Investigation, Threat Intel Feeds)
• Support incident response and investigations with actionable intelligence
• Prepare weekly and monthly reports on key findings and trends

Requirements:

• Proven experience in Threat Intelligence, Cybercrime Research, or a related field
• Strong Python coding skills (data parsing, automation, API usage, and scripting)
• Hands-on experience with Telegram, dark web, or underground sources
• Familiarity with MITRE ATT&CK, IOCs, YARA/SIGMA rules, and threat actor profiling
• Understanding of cybercrime ecosystems, infostealer logs, and credential leaks
• Ability to work independently and deliver results under minimal supervision
• Excellent analytical and written communication skills (English or Arabic)

Benefits:

• Competitive salary based on experience
• Opportunity to work on cutting-edge dark web and threat intelligence operations
• A collaborative environment with a passionate team of security professionals
• Continuous growth opportunities within a fast-scaling cybersecurity company