Bug Hunter - Dark Web & Threat Intelligence

black.ai; Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

black.ai is seeking candidates for a critical role focusing on identifying vulnerabilities in prospects' assets and applications using passive reconnaissance techniques. Successful applicants will be responsible for researching data on prospects from OSINT and dark web sources, and producing impactful reports that include actionable recommendations.

Candidates should possess a passion for information security, strong communication skills, and familiarity with common vulnerability classes. This role is essential for supporting the sales team's efforts and driving business growth.

Qualifications

• Strong passion for information security and continuous learning.
• Excellent communication skills.
• Familiarity with passive reconnaissance and tools.

Responsibilities

• Conduct passive reconnaissance to identify vulnerabilities.
• Gather data using OSINT and dark web research.
• Write clear reports with remediation recommendations.

Skills

Information security

Written and verbal communication

Passive reconnaissance techniques

Web and infrastructure vulnerabilities

AI tools usage

Tools

OSINT tools

Python

Job description

About The Team

The Pursuits team produces dark web and threat intelligence on prospects, the companies Cyble's sales and presales teams are trying to win. Early, validated intelligence shows a prospect what's exposed about it (access for sale, leaks, vulnerable assets) and demonstrates Cyble's offering in action. Our internal customers are sales and presales, and our work directly supports new-client growth.

We cover the dark web (access sales, leaks, malicious tools, marketplaces) and threats from ransomware groups, extortion crews, hacktivists, and APTs, plus cloud storage exposures and other vulnerabilities. Our work is both proactive and driven by collaboration with other teams.

About The Role

You find vulnerabilities and misconfigurations in a prospect's assets, applications, and domains using passive reconnaissance, then write them up clearly. The core of the job is surfacing impactful findings and detailing them in reports with proof‑of‑concept steps and remediation recommendations.

What You’ll Do At Cyble

• Run passive reconnaissance on prospects' assets, applications, and domains to find vulnerabilities and misconfigurations (no active scanning or exploitation).


• Use OSINT and dark web research, along with other avenues, to gather relevant data on prospects.


• Write clear, impactful reports with proof‑of‑concept steps and remediation recommendations.


• Keep learning and stay current on the latest research techniques and tools.


• Work with the team to report findings accurately and on time.

What You’ll Need

• A strong passion for information security and learning.


• Excellent written and verbal communication.


• Familiarity with passive reconnaissance techniques and tools.


• Familiarity with common web and infrastructure vulnerability classes and how to demonstrate them safely.


• Able to use AI tools effectively to speed up research and writing.


• A track record of impactful findings, with writeups or proof‑of‑concept work you can walk us through.

Bonus Points If You Have

• Familiarity with OSINT and dark web research.


• Basic scripting (Python/regex) for parsing data and automating checks.


• Exposure to bug bounty programs or coordinated disclosure / CVE work.

How The Role Is Measured?

• Impactful findings delivered each week.


• Reports are clear, accurate, and timely, with reproducible proof‑of‑concept steps.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected Veteran status age, or genetics, or any other characteristic protected by law.