Pre-Sales Engineer

Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company’s DNA, shaping its technological capabilities to defend businesses, citizens, and support law enforcement operations. Group-IB’s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.

ABOUT THE ROLE

You will support pre-sales and delivery activities across the South Korea region. You will work closely with Group-IB clients and internal teams to deliver tailored cybersecurity solutions. As a technical advisor, you will be responsible for ensuring effective deployment, solution customization, and pre-sales support across South Korea market.

YOUR MISSION

• Provide strong client engagement and consultation.
• Shape customer expectations based on results of delivered services.
• Prepare detailed project and technical documentation.
• Collaborate with customers on solution architecture and implementation strategies.
• Support and manage pre-sales activities, including demos, POCs, and technical workshops.
• Deliver seminars, technical enablement, and hands-on training sessions.
• Assist in deployment, installation, and configuration of Group-IB solutions both remotely and on-site.
• Customize and optimize deployed solutions for customer environments.
• Ensure solution performance during PoCs, subscriptions, and ongoing engagements.
• Provide technical support, especially around threat detection, incident response, and remediation use cases. 

WHAT WE ARE LOOKING FOR

• At least 5 years’ experience in Cyber Security activities in the high-tech industry.
• Strong hands-on expertise in Threat Hunting, Digital Forensics, and Compromise Assessments.
• Understanding of Incident Response workflows.
• Experience in red teaming, penetration testing, or adversary emulation is a strong plus.
• Familiarity with malware behavior, botnets, and common threat actor techniques.
• Practical knowledge of cybersecurity solutions across EDR, NDR, SIEM, and SOAR platforms.
• Ability to clearly communicate technical content to both business and technical stakeholders.
• Solid grasp of enterprise IT infrastructures.
• Understanding of modern cryptography, security controls, and secure architecture principles.
• Strong analytical skills and a passion for continuous learning and growth in the cybersecurity field.

WHAT SETS YOU APART

• Strong understanding of network infrastructure and protocols, including DNS, DHCP, TCP/IP, VLANs, VPNs, SPAN, IDS/IPS, etc… and threat detection methodologies through network monitoring.
• Solid knowledge of endpoint security technologies, such as Antivirus (AV), Endpoint Protection Platforms (EPP), Endpoint Detection and Response (EDR), etc… along with threat detection methodologies via endpoint monitoring.
• Ability to analyze endpoint logs and network traffic (e.g., PCAPs) to identify threats, investigate security incidents, and perform comprehensive root cause analysis.
• Familiarity with cybersecurity frameworks and methodologies, such as MITRE ATT&CK, NIST, and Kill Chain models, for structured analysis and response.
• Demonstrates a collaborative mindset, excellent communication skills, and strong motivation to work in a dynamic, cross-functional, and cross-regional team.
• Fluent in English, both written and spoken.