Back to jobs
Job Description
- Engage across Google Threat Intelligence Group (GTIG) and Alphabet to identify, vet and refine disruption opportunities, working closely with GTIG mission tech leads, threat ops, intel delivery, and product areas.
- Analyze data to build a comprehensive picture of threat actor infrastructure, malware, tactics, organizational structure, and other relevant factors in support of disruption planning.
- Support disruption operations by preparing intelligence for partners, drafting abuse notifications to service providers, and tracking operational milestones.
- Contribute to the development and testing of detections, such as Yara rules and network signatures, to identify malicious activity and infrastructure at scale.