Positive Technologies is a company with twenty years of history in the field of information security. We develop products and services in the area of countering modern cyber threats. We create solutions and technologies that protect against attackers and investigate incidents. At Positive Technologies, a large number of solutions are continuously created and developed, helping companies of various levels to implement comprehensive and high-quality security of their information environment.
CyberWeather at Positive Technologies is engaged in forecasting cyber threats and managing the external attack surface. The team is already collecting a large volume of threat data, and now we need someone who can build an up-to-date picture of the threat landscape from this information and transform it into product opportunities. We are looking for a Product Owner for the TI direction with a deep expert background in threat intelligence, who can combine analytics, development, and customer needs into a single working system.
Responsibilities
- Build a model of how the collected data about groups, their tools, vectors, and target industries fits into the current threat landscape and the product;
- Formulate the TI component of the product: determine which scenarios and functions users need, assemble a cohesive solution from disparate parts, and assign responsibility for each of them;
- Work with potential customers, understand their tasks, and anticipate the scenarios they will need;
- Monitor new trends in attacks and in the TI market and promptly translate them into product solutions;
- Work closely with development, analysts, and the dark web analysis team, negotiate priorities, and bring tasks to release;
- Mentor current and new employees, helping them develop product thinking, and participate in hiring new people for the direction.
What is important to us
- Serious experience in threat intelligence or vulnerability analysis in the past: you have a good understanding of APT and cybercriminal groups, their TTPs, typical targets, and industry-specific attack patterns. Current reverse engineering or rule writing practice is not required for this role;
- Experience with a product where your expertise has been transformed into ready-made product solutions that clients use (detection signatures and rules do not count here);
- Understanding of how development works and experience in cross-functional interaction with development teams;
- Ability to communicate with customers and translate their needs into product requirements;
- Readiness and willingness to train people and transfer your approach to them.
Will be a plus
- Experience working in vendors or TI teams of large cybersecurity companies;
- Familiarity with frameworks and standards such as MITRE ATT&CK, STIX/TAXII, Diamond Model;
- Experience with EASM, DRP, or supply chain risk assessment.
What we offer:
- Flexible schedule and possibility of hybrid work;
- Conditions for continuous development: internal meetups, popular science lectures, expert training, programming competitions, leadership training, and more;
- Opportunity to gain knowledge and experience relevant to your role through external educational programs at the company's expense;
- Flexible approach to rest: 28 calendar days of vacation, vacation pay supplement up to full salary, and 10 days off per year;
- Health care: Voluntary Medical Insurance from the first week of employment, including dentistry and an annual check-up;
- Reimbursement of up to 50% of expenses for sports and English language training within the annual budget;
- Work in an accredited IT company and the opportunity to use benefits from the Ministry of Digital Development.
