Role responsibilities:

In order to increase the knowledge of the threat targeting Middle East & Africa areas, two main activities must be driven:

• Searching for information sources specific to the MEA area. This consists in searching and identifying sources such as blogs, twitter accounts, research works, forums, etc. made in the MEA area. (also interesting research projects)
• Building new information sources through dedicated algorithms to analyze available data or implementation of honeypots. As far as honeypots are concerned, there are at least two possible tracks:

– The first is to rely on internal work to deploy honeypots on different basic protocols (HTTP, SSH, etc.).

– The second would be to work on creating or deploying an existing spam or spam trap honeypot. This second option might be more interesting because without a doubt, we would be able (if it works) to detect threats that really target the area and especially phishing threats which is still one of the most effective ways for attackers.

• Periodic interactions with the CTI (Cyber Threat Intelligence team) will be conducted, as well as with the MEA Security Operations Center teams to consider the PoC deployment of honeypots.

Requirements:

• Extended knowledge cybersecurity domain, and more specifically for the field of threat intelligence for information retrieval and data analysis
• Development skills for prototyping (e.g. Go, Python, Shell)
• Interest in Novelty and Technology
• Good sense of inter-personal communication
• Excellent level of spoken and written English
• Fluent level of French would be a plus