Cyber Threat Intelligence Analyst
Read straight from Cleafy's careers page, verified 2d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
Salary€37k – €46k
LocationMilan, Metropolitan City of Milan, Italy
Work modehybrid
Typefull-time
SeniorityMid
Experience3+ yrs
DepartmentThreat Intelligence and Incident Response Team
Company size51–200 people
PostedOct 30, 2026 · 6d ago
Verified live2d ago
At a glanceSummarised by Seekless from the posting.
3+ years of experience in a cybersecurity role, either SOC analyst, security engineer, or consultant
Solid knowledge of web and mobile security principles
Ability to create technical reports
Fluency in English and Italian, written and verbal
Experience with programming languages using Python, C, Java (or similar)
2+ years of experience in static/dynamic malware analysis with demonstrated skills
Proven ability in triaging threats (or malware families) using automated processes (e.g., sandboxes)
Explaining technical details/efforts in a concise, actionable manner
Skills
Python
C
Java
Benefits
Meal vouchers
Welfare benefits
Smart working
Paid volunteering
Enhanced maternity leave
Enhanced paternity leave
About the company
Cleafy is a SaaS security company built by fraud hunters, security engineers, data scientists, and software developers with a shared mission: shift left security.
At Cleafy, we consider any digital fraud the last step of an attack. We shift left fraud management, managing the attack before it executes the fraud. We provide an AI-driven security platform that helps banks and financial institutions to detect threats in advance and to mitigate them in real time, anticipating fraud and bridging the gap between cybersecurity and fraud prevention.
About the role
Cleafy is expanding internationally, and we are looking to hire an Android malware analyst to join our Threat Intelligence and Incident Response Team (TIR).
In this role, you will be right in the middle of the action, hunting the most aggressive and complex attack campaigns and frauds while still in action. As a member of our TIR team, you will analyze customer data and traffic, scouting for suspicious behaviors and unknown attacks before they go to scale. Moreover, you will also discover new and unknown threats to keep our classification and detection capabilities up to date.
Responsibilities
•
Perform strategic, tactical, and operational research and analysis on modern Android threats, focusing on banking trojans
•
Conducting malware clustering
•
Conducting research into unknown emerging Android banking trojan families
•
Hunting TTPs of threat actors
•
Writing technical reports
Requirements
•
3+ years of experience in a cybersecurity role, either SOC analyst, security engineer, or consultant
•
Solid knowledge of web and mobile security principles
•
Ability to create technical reports
•
Fluency in English and Italian, written and verbal
•
Experience with programming languages using Python, C, Java (or similar)
Plus
•
2+ years of experience in static/dynamic malware analysis with demonstrated skills
•
Proven ability in triaging threats (or malware families) using automated processes (e.g., sandboxes)
•
Explaining technical details/efforts in a concise, actionable manner
Benefits
•
Meal vouchers (Ticket Restaurant)
•
Welfare benefits program
•
Smart working flexibility
•
Up to 8 hours of paid volunteering time per month
•
Enhanced maternity and paternity leave to support work-life balance
RAL: €37,000 - €46,000
Legal
Cleafy is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any kind. Our company is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Cleafy are based on business needs, job requirements, and individual qualifications, without regard to ethnicity, color, gender, religion or belief, age, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.