Jsoc - Cybersecurity Specialist, Digital Threat Hunting
Questrade Financial Group
- Rosario, Santa Fe
- Permanente
- Tiempo completo
Questrade Financial Group (QFG) operates through Questrade, Questrade Wealth Management, Community Trust Company, Zolo, and Flexiti Financial, providing securities, foreign currency investment, managed portfolios, mortgages, real-estate services, and more.
Benefits
Health & wellbeing resources and programs
Paid vacation, personal, and sick days for work-life balance
Competitive compensation and benefits packages
Career growth and development opportunities
Opportunities to contribute to community causes
Diverse and inclusive collaborative environment
Responsibilities
Identify and take down customer-facing and external digital threats, including phishing sites, brand impersonation, typosquatting domains, and fraud campaigns.
Investigate digital fraud patterns, coordinate takedowns with registrars and hosting providers, monitor social media for brand threats, and maintain relationships with external abuse teams and law enforcement.
Collaborate with internal customers and vendor support teams to optimize security tool usage in line with corporate policies and business needs.
Work with Cybersecurity and IT teams to align priorities, execute plans for new initiatives, and contribute to process improvements and documentation.
Monitor phishing sites, typosquatting domains, and fraudulent web properties targeting the organization and its customers.
Coordinate and execute takedown requests with domain registrars, hosting providers, and platform abuse teams.
Monitor social media platforms for brand impersonation, fake accounts, and fraud campaigns.
Track and investigate digital fraud patterns, credential-harvesting campaigns, and customer-targeted scams.
Maintain relationships with external takedown service providers and law enforcement contacts for escalation of persistent fraud operations.
Provide intelligence on external threat actors and fraud TTPs to the CTI Specialist.
Produce digital fraud metrics: phishing sites identified, takedown success rate, average time-to-takedown, social media impersonation cases resolved.
Collaborate with the Security Engineer on anti-fraud engineering tooling and automation for detection and takedown workflows.
Perform OSINT investigations on suspicious domains, registrants, and hosting infrastructure.
Analyze phishing kits and credential-harvesting pages to understand attacker tactics and customer exposure.
Track dark web and underground forums for discussions of fraud campaigns targeting the organization.
Document takedown requests, outcomes, and lessons learned for continuous improvement of fraud-prevention workflows.
Monitor threat feeds and external intelligence sources for emerging fraud TTPs and threat-actor activity.
Coordinate with customer support and fraud response teams to assess customer impact and provide incident guidance.
Support communication with customers affected by phishing, impersonation, or fraud campaigns.
Maintain awareness of regulatory requirements and industry standards related to brand protection and fraud prevention.
Mentor junior analysts on OSINT techniques, phishing analysis, and digital fraud investigation methods.
Communicate digital fraud findings, trends, and recommendations to technical and non-technical stakeholders.
Track and report on digital threat hunter program metrics (cases handled, investigation turnaround time, threat intel shared).
Qualifications
3+ years of relevant experience in threat intelligence, OSINT, digital fraud investigation, or security operations.
Experience with OSINT techniques, tools, and methodologies for investigating external threats and digital fraud.
Practical experience with phishing kit analysis, credential-harvesting page identification, and fraud pattern recognition.
Experience with brand protection and monitoring platforms for detecting impersonation, counterfeiting, and fraud campaigns.
Experience coordinating takedown requests with domain registrars, hosting providers, and social media platforms.
Knowledge of domain registration, DNS, WHOIS, and internet infrastructure fundamentals.
Knowledge of social media platforms, fraud detection indicators, and brand impersonation identification.
Knowledge of dark web monitoring tools, underground forums, and threat-actor communication channels.
Knowledge of fraud frameworks, anti-fraud platforms, and industry standards for brand protection and customer safety.
Experience with dark web monitoring and threat intelligence platforms.
Programming skills (Python) for OSINT automation.
Active participation in fraud prevention and brand protection communities.
Preferred Certifications
GOSI, SANS FOR589, GCTI, HTB CDSA or similar relevant certifications.
EEO & Diversity Statement
Questrade Financial Group is committed to fostering a diverse, inclusive and accessible work environment.
Our team reflects the diversity of the communities we serve.
We value the unique skills and experience each individual brings.
Candidates requiring accommodation during the recruitment process should let us know so we can support their needs.
#J--Ljbffr
Buscojobs