Experience : 5-12 Years

Role Summary :

The Threat Research Analyst will be responsible for in-depth investigation into the Tactics, Techniques, and Procedures (TTPs) employed by threat actors in phishing and online scam campaigns. You will contribute to the development of actionable intelligence, propose innovative detection strategies, and support efforts to disrupt malicious activities. Based in our Product team, this role requires a proactive approach to threat hunting and a commitment to staying ahead of emerging online threats.

Key Responsibilities :

- Conduct comprehensive research and analysis of phishing, social engineering, and online scam campaigns, identifying key indicators, attack vectors, and infrastructure.

- Analyze TTPs used by various threat actors, including their methods for reconnaissance, delivery, exploitation, and post-compromise activities related to scams.

- Develop and maintain a deep understanding of the global and regional threat landscape, with a particular focus on trends impacting India and the APAC region.

- Leverage Open-Source Intelligence (OSINT) and other intelligence sources to gather information on threat actors, their motives, and their operational security.

- Collaborate with internal teams (e.g., engineering, product, operations) to translate research findings into actionable intelligence, improved detection rules, and proactive disruption strategies.

- Create detailed threat intelligence reports, briefings, and presentations for internal stakeholders and, at times, for external clients or publication.

- Monitor and track emerging threats, vulnerabilities, and exploits relevant to phishing and online scams.

Required Skills & Experience :

Experience :

- Minimum of 5-7 years of experience in a dedicated cyber threat intelligence, threat research, or security analyst role, with a strong focus on phishing, fraud, or online scams.

- Proven experience in analyzing complex threat data and identifying patterns and trends.

Technical Skills :

- Strong understanding of common attack vectors, malware types, and network protocols.

- Proficiency in OSINT techniques and tools for gathering and analyzing publicly available information.

- Familiarity with threat intelligence frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, Diamond Model).

- Experience with threat intelligence and security operations toolsets.

- Intermediate to advanced scripting skills (e.g., Python, PowerShell) for data analysis and automation are highly desirable.

- Knowledge of email security protocols (SPF, DKIM, DMARC) and their role in combating phishing.

- Understanding of web technologies (HTML, CSS, JavaScript) and how they are exploited in online scams.