Information Security Researcher

CryptoMize; New Delhi; On-site; INR 2,800,000 - 4,000,000; Full time

Job summary

CryptoMize in New Delhi is hiring an Information Security Researcher to join the HQ security cell. You will conduct comprehensive threat research, assess vulnerabilities, and analyze exploit chains to convert findings into actionable intelligence for analysts and clients.

You will also design social-engineering detection programs and evaluate human-vector attack methods while reverse-engineering persistence techniques to stay ahead of cyber threats.

Qualifications

• Threat research discipline and practical security research experience.
• Knowledge of vulnerability and exploit-chain analysis.
• Experience with malicious code analysis and detection design.

Responsibilities

• Research threats targeting networks and data, including attackers and the criminal ecosystem.
• Analyse vulnerabilities and exploit chains to understand real-world attacks.
• Design social-engineering detection programs and evaluate human-vector attacks.

Skills

Threat research

Vulnerability analysis

Exploit-chain analysis

Malicious code analysis

Social-engineering detection

Fraud auditing

Reverse-engineering persistence

Tools

Ghidra

Wireshark

Sandbox environments

CVE/NVD databases

VirusTotal

Job description

Information Security Researcher jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis — the agency’s threat-intelligence services run on original research, and that research needs hands. This is a full-time, permanent position with immediate joining, based at our New Delhi HQ, inside the research cell that feeds the security function. An Information Security Researcher here performs a wide range of security research tasks: studying the techniques that threaten networks and the data on them, picking apart exploit chains and malicious code, and converting findings into the intelligence our analysts and clients operate on. Below is the complete job description — the research responsibilities, the requirements, the seniority path, and the selection process.

What you will actually do:

• Research the threats that target computer networks and the data residing on them — hackers, insiders, malicious code, and the criminal ecosystem behind them
• Analyse vulnerabilities and exploit chains: how attacks actually work, not how the marketing copy says they work
• Design social-engineering detection programs and evaluate the human-vector attacks they must catch

Skills that matter:

Threat research discipline, Vulnerability and exploit-chain analysis, Malicious code analysis at depth, Social-engineering attack research and detection design, Fraud auditing and investigation methods, Reverse-engineering persistence and obfuscation.

Tools you will use:

Ghidra for reverse engineering, Wireshark for traffic analysis, Sandbox environments, CVE/NVD databases and VirusTotal.

Location:

New Delhi (HQ), E4, Vasant Vihar.

Type:

full-time permanent.

Availability:

immediate, rolling intake.

Compensation:

discussed at screening.