Cyber Intelligence Analyst

CryptoMize; Dive Anjur; On-site; INR 1,500,000 - 2,800,000; Full time

Job summary

CryptoMize in New Delhi seeks a Cyber Intelligence Analyst to own the threat-intel workstream for 1–2 client engagements, from pipeline maintenance to client-brief delivery. This is a full-time, permanent role within the cybersecurity and intelligence cells powering S3-SENTINEL and CLAIRVOYANCE CX platforms for political, healthcare, and enterprise clients across 18 countries.

You will design the cell’s collection architecture, develop the credibility-scoring model, and deliver senior-level

Qualifications

• Senior threat-actor profiling
• MISP operations
• OSINT collection discipline
• Reporting at the senior level
• Indicator correlation at scale
• Tool fluency

Responsibilities

• Own the threat-intel workstream for one or two live client engagements — pipeline maintenance, IOC correlation, threat-actor profiling, and client-brief delivery
• Set and maintain the cell’s credibility-scoring model — the discipline that separates real threats from noise across the client portfolio
• Design the cell’s collection architecture for new engagements — feeds, OSINT coverage, dark-web monitors, and the bespoke tooling the engagement demands

Skills

Threat-actor profiling

MISP operations

OSINT collection

Senior-level reporting

Indicator correlation

Tool fluency

Tools

MISP

STIX/TAXII

Python

Pandas

Job description

Cyber Intelligence Analyst jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis. This is a full-time, permanent position with immediate joining, sitting inside the cybersecurity and intelligence cells that power the S3-SENTINEL and CLAIRVOYANCE CX platforms for political, healthcare, and enterprise clients across 18 countries. The senior analyst owns the threat-intel workstream for one or two engagements end-to-end — from pipeline maintenance to client-brief delivery — and the same operational model applies as every other cell: capacity is hired ahead of the next engagement, not after. Below is the complete job description, the responsibilities you will own from day one, the requirements, the seniority path, and the selection process. Experienced analysts who want their work to mean something — IOCs that flowed into a client briefing, threat profiles that shaped a political engagement — should read to the end.

What you will actually do:

• Own the threat-intel workstream for one or two live client engagements — pipeline maintenance, IOC correlation, threat-actor profiling, and client-brief delivery
• Set and maintain the cell’s credibility-scoring model — the discipline that separates real threats from noise across the client portfolio
• Design the cell’s collection architecture for new engagements — feeds, OSINT coverage, dark-web monitors, and the bespoke tooling the engagement demands

Skills that matter:

Senior threat-actor profiling, MISP operations, OSINT collection discipline, Reporting at the senior level, Indicator correlation at scale, Tool fluency.

Tools you will use:

MISP, MISP galaxy cluster model for threat-actor and campaign-taxonomy classification, Python 3.11 + pandas for IOC aggregation, pivot queries, and report automation, MISP-feed integration — STIX/TAXII import pipelines and the feed-credibility scoring model.

Location: New Delhi (HQ), E4, Vasant Vihar. Type: full-time permanent. Availability: immediate, rolling intake. Compensation: discussed at screening.