Presales Engineer

About the Company

Founded in 2003 and headquartered in Singapore, Group-IB is a creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to analyze and mitigate regional and country-specific threats.

About the Role

You will support pre-sales and delivery activities across the APAC region, working closely with clients and internal teams to deliver tailored cybersecurity solutions. As a technical advisor, you will ensure effective deployment, solution customization, and pre-sales support across various markets in Asia-Pacific.

Responsibilities

• Provide strong client engagement and consultation.
• Shape customer expectations based on results of delivered services.
• Prepare detailed project and technical documentation.
• Collaborate with customers on solution architecture and implementation strategies.
• Support and manage pre-sales activities, including demos, POCs, and technical workshops.
• Deliver seminars, technical enablement, and hands-on training sessions.
• Assist in deployment, installation, and configuration of Group-IB solutions both remotely and on-site.
• Customize and optimize deployed solutions for customer environments.
• Ensure solution performance during PoCs, subscriptions, and ongoing engagements.
• Provide technical support around threat detection, incident response, and remediation use cases.

Qualifications

• At least 5 years’ experience in Cyber Security activities in the high-tech industry.
• Strong hands-on expertise in Threat Hunting, Digital Forensics, and Compromise Assessments.
• Understanding of Incident Response workflows.
• Experience in red teaming, penetration testing, or adversary emulation is a strong plus.
• Familiarity with malware behavior, botnets, and common threat actor techniques.
• Practical knowledge of cybersecurity solutions across EDR, NDR, SIEM, and SOAR platforms.
• Ability to clearly communicate technical content to both business and technical stakeholders.
• Solid grasp of enterprise IT infrastructures and secure architecture principles.
• Strong analytical skills and a passion for continuous learning and growth in the cybersecurity field.
• Fluent in English, both written and spoken.

Skills

• Strong understanding of network infrastructure and protocols (DNS, DHCP, TCP/IP, VLANs, VPNs, SPAN, IDS/IPS) and threat detection via network monitoring.
• Knowledge of endpoint security technologies (AV, EPP, EDR) and endpoint monitoring methodologies.
• Ability to analyze endpoint logs and network traffic (e.g., PCAPs) to identify threats and perform root cause analysis.
• Familiarity with cybersecurity frameworks and methodologies such as MITRE ATT&CK, NIST, and Kill Chain.
• Collaborative mindset, excellent communication skills, and motivation to work in a dynamic, cross-functional, cross-regional team.

Benefits

• Continuing professional development paths (expert, management, cross-department moves, relocation opportunities).
• Health insurance.
• Support for certifications and training courses; incentive program to achieve professional certificates at company expense.
• Work in a team with extensive international expertise and exposure to complex, international projects.
• Flexible schedule (no fixed working hours).