Lead Treat

Ocwen Financial Corporation; Pune District, Mumbai, Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Ocwen Financial Corporation in India seeks a Lead Threat Researcher & Security Analyst to spearhead proactive defense, threat hunting, and automated intelligence lifecycles across our AI and GenAI ecosystems.

You will lead advanced threat research, design red-team exercises, develop detection logic with SOC, and guide governance for AI security and prompt monitoring.

Ideal candidates have 6–7 years in cybersecurity, experience with SIEM/EDR, MITRE ATT&CK, and strong communication skills.

Qualifications

• 6-7 years of cybersecurity experience focused on Threat Research, SOC Level 3, or Offensive Security.

Responsibilities

• Architect and manage automated Threat Intelligence ecosystem integrated into SIEM/EDR.
• Map adversary TTPs against our infrastructure using MITRE ATT&CK.
• Lead threat risk assessments of CVEs and supply chain vulnerabilities.
• Deliver threat briefings and threat-modeling sessions for teams.
• Design red-team exercises and purple-team collaborations.
• Develop detection logic (Sigma, YARA, or KQL) with SOC.
• Monitor AI tools and GenAI platforms for data exposure and prompt risks.

Skills

Threat research

SOC Level 3

Offensive security

IOC analysis

SIEM & EDR

Threat intel platforms

AI security awareness

Communication skills

Analytical thinking

Tools

SIEM

EDR

Threat intel platforms

MITRE ATT&CK

Job description

Job Role: Lead Threat Researcher & Security Analyst

Role Summary

We are looking for a high-caliber security professional with 67 years of experience to lead our proactive defense and threat research initiatives. This role is designed for an expert who bridges the gap between deep technical analysis and strategic security architecture. You will be responsible for hunting sophisticated adversaries, automating intelligence lifecycles, and pioneering security controls for our AI and GenAI ecosystems. The ideal candidate possesses an \"adversary-first\" mindset and the ability to turn complex threat data into robust, automated defenses.

Key Responsibilities

1. Advanced Threat Intelligence & Adversary Research

• Architect and manage an automated Threat Intelligence ecosystem that integrates disparate feeds into high-fidelity, actionable alerts within our SIEM and EDR.
• Move beyond basic IOCs to map sophisticated adversary tactics (TTPs) against our specific infrastructure using the MITRE ATT&CK framework.
• Lead the proactive identification and risk assessment of high-impact CVEs and supply chain vulnerabilities relevant to our tech stack.
• Deliver high-level threat briefings and \"threat-modeling\" sessions for infrastructure and application teams to strengthen the organizational security posture.

2. Offensive Security & Detection Engineering

• Design and execute targeted red-team style exercises and \"purple team\" collaborations to validate our detection and response capabilities.
• Conduct advanced security research across cloud-native environments, APIs, and proprietary applications to identify logical flaws.
• Partner with the SOC to develop and refine custom detection logic (Sigma, YARA, or KQL) based on original offensive research and emerging threat trends

3. AI Security Governance & Prompt Monitoring

• Assist in monitoring and supporting security controls for AI tools, GenAI platforms, and AI agents.
• Help identify and flag:
  • Potential sensitive or confidential data exposure via AI prompts
  • Risky or noncompliant prompt usage
• Support AIrelated security assessments and governance initiatives as required.

Required Skills & Experience

• 6-7 years of cybersecurity experience, with strong focus on Threat Research, SOC Level 3, or Offensive Security.
• Solid experience with IOC analysis, SIEM, EDR, and threat intelligence platforms
• Good understanding of zeroday threats, CVEs, and realworld attack trends
• Handson knowledge of ethical hacking, penetration testing, or offensive security techniques
• Familiarity with MITRE ATT&CK framework and attacker tactics
• Strong analytical and communication skills
• Exposure to AI security, GenAI risk management, or prompt/data monitoring

Preferred Certifications:

• OSCP, OSEP, GCTI, CTIA, CISA, CISSP, GCFA.