{"id":3540062,"url":"https://alion.io/job/cleafy-cyber-threat-intelligence-analyst","title":"Cyber Threat Intelligence Analyst","company":{"id":6132,"name":"Cleafy","domain":"cleafy.com","url":"https://alion.io/company/cleafy","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Milan, Italy"],"countries":["IT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":37000,"max":46000,"currency":"EUR","period":"year","gross":null,"usd_annual":51402},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Java","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false}],"status":"live","first_seen_at":"2026-10-30T18:54:55Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-01T12:43:21Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Cleafy is a SaaS security company built by fraud hunters, security engineers, data scientists, and software developers with a shared mission: shift left security.\nAt Cleafy, we consider any digital fraud the last step of an attack. We shift left fraud management, managing the attack before it executes the fraud. We provide an AI-driven security platform that helps banks and financial institutions to detect threats in advance and to mitigate them in real time, anticipating fraud and bridging the gap between cybersecurity and fraud prevention.\nCleafy is expanding internationally, and we are looking to hire an Android malware analyst to join our Threat Intelligence and Incident Response Team (TIR).\nIn this role, you will be right in the middle of the action, hunting the most aggressive and complex attack campaigns and frauds while still in action. As a member of our TIR team, you will analyze customer data and traffic, scouting for suspicious behaviors and unknown attacks before they go to scale. Moreover, you will also discover new and unknown threats to keep our classification and detection capabilities up to date.\nResponsibilities\nPerform strategic, tactical, and operational research and analysis on modern Android threats, focusing on banking trojans\nConducting malware clustering\nConducting research into unknown emerging Android banking trojan families\nHunting TTPs of threat actors\nWriting technical reports\nRequirements\n3+ years of experience in a cybersecurity role, either SOC analyst, security engineer, or consultant\nSolid knowledge of web and mobile security principles\nAbility to create technical reports\nFluency in English and Italian, written and verbal \nExperience with programming languages using Python, C, Java (or similar)\nPlus\n2+ years of experience in static/dynamic malware analysis with demonstrated skills\nProven ability in triaging threats (or malware families) using automated processes (e.g., sandboxes)\nExplaining technical details/efforts in a concise, actionable manner\nBenefits\nMeal vouchers (Ticket Restaurant)\nWelfare benefits program\nSmart working flexibility\nUp to 8 hours of paid volunteering time per month\nEnhanced maternity and paternity leave to support work-life balance\nRAL: €37,000 - €46,000\nCleafy is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any kind. Our company is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Cleafy are based on business needs, job requirements, and individual qualifications, without regard to ethnicity, color, gender, religion or belief, age, family or parental status, or any other status protected by the laws or regulations in the locations where we operate.","description_format":"text","description_chars":2832,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Italian","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence","Information Security","Fraud Detection","RegTech, AML & Compliance"],"lifecycle":[{"event":"open","at":"2026-10-30T18:54:55Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:1","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":{"stated_usd_annual":51402,"is_top_pay":false},"html_url":"https://alion.io/job/cleafy-cyber-threat-intelligence-analyst","json_url":"https://alion.io/job/cleafy-cyber-threat-intelligence-analyst.json","meta":{"generated_at":"2026-11-01T16:19:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25141,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6132},"rest":"https://alion.io/mcp/rest/get_company?id=6132"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcleafy-cyber-threat-intelligence-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcleafy-cyber-threat-intelligence-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcleafy-cyber-threat-intelligence-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cleafy-cyber-threat-intelligence-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcleafy-cyber-threat-intelligence-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3540062}},{"tool":"search_jobs","arguments":{"company":"cleafy.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3540062},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}