OSINT, Crypto & Threat Intelligence

Hiring Squad; Mumbai; On-site; INR 1,200,000 - 2,000,000; Full time

Job summary

Hiring Squad in Mumbai seeks a Consultant - OSINT, Crypto & Threat Intelligence to conduct open-source intelligence, dark-web surface checks, crypto tracing, and domain/IP investigations.

You will produce attribution leads, build link charts, preserve web evidence with timestamps and URLs, and support threat intelligence inputs for cyber incidents and fraud RCA, while keeping ethical and legal boundaries.

Qualifications

• BE/B.Tech/MCA/BSc IT/Cyber Forensic or equivalent technical background.
• 3-5 years in OSINT, cyber threat intelligence, fraud investigation, brand abuse, AML or cybercrime support.
• Strong web investigation skills across domains, IPs, DNS, WHOIS, repositories, social platforms and breach indicators.
• Exposure to OSINT and SOCMINT tools like Maltego, SpiderFoot, Shodan, URLScan, VirusTotal, Recorded Future, MISP or equivalent.
• Exposure to Blockchain basics including wallet addresses, transaction flows, exchanges, mixers and red flag indicators.
• Experience with social media monitoring, profile analysis, fake identity detection and online footprint mapping.
• Awareness of ethical, legal and terms-of-use boundaries for OSINT work.
• Ability to preserve web evidence through screenshots, timestamps, URLs and evidence notes.
• Understanding of threat actor TTPs, phishing infrastructure and brand impersonation indicators.
• Good report writing for intelligence leads, confidence levels and limitations.
• Python/scripting or API usage preferred.

Responsibilities

• Produce open-source intelligence leads and clearly rate confidence.
• Support crypto tracing and domain/IP investigations.
• Preserve web evidence defensibly.
• Corroborate external intelligence with device, email and transaction evidence.
• Document lawful and ethical collection boundaries.
• Maintain link charts and attribution summaries.
• Escalate legal uncertainty or intrusive methods risk.
• Support cyber incident and fraud RCA with external context.
• Build reusable OSINT templates and checklists.
• Prepare concise intelligence notes for reports.

Skills

OSINT

Cyber threat intelligence

Fraud investigation

Brand abuse

AML

Web investigation

OSINT tools

Blockchain basics

Social media monitoring

Python scripting

Report writing

AI tool usage

Education

BE/B.Tech/MCA/BSc IT/Cyber Forensic or equivalent

Tools

Maltego

SpiderFoot

Shodan

URLScan

VirusTotal

Recorded Future

MISP

Job description

Consultant - OSINT, Crypto & Threat Intelligence

Position Consultant - OSINT, Crypto & Threat Intelligence

Role / Level Consultant | Headcount: 1

Experience 3-5 years

Role Conduct open-source intelligence, dark-web surface checks, crypto tracing

support, domain/IP investigations and external attribution leads.

JD Focus

Conduct OSINT on suspects, domains, emails, mule indicators, phone numbers and online identities.; Prepare link charts, attribution leads and confidence-rated intelligence outputs.; Support crypto scam matters with wallet transaction tracing and exchange/mule leads..

A. Job Description

• Conduct OSINT on suspects, domains, emails, mule indicators, phone numbers and online identities.
• Prepare link charts, attribution leads and confidence-rated intelligence outputs.
• Support crypto scam matters with wallet transaction tracing and exchange/mule leads.
• Identify phishing, impersonation, deepfake infrastructure and brand abuse indicators.
• Preserve online evidence with screenshots, timestamps, URLs and evidence notes.
• Coordinate with mobile and endpoint teams to corroborate external intelligence.
• Document source reliability, collection method, limitations and legal caution.
• Support threat intelligence inputs for cyber incidents and fraud RCA.
• Assist analytics role in building graph views of actors, assets and transaction trails.
• Maintain reusable OSINT playbooks for Maharashtra cybercrime case typologies.

B. Qualifications and Skills

• BE/B.Tech/MCA/BSc IT/Cyber Forensic or equivalent technical background.
• 3-5 years in OSINT, cyber threat intelligence, fraud investigation, brand abuse, AML or cybercrime support.
• Strong web investigation skills across domains, IPs, DNS, WHOIS, repositories, social platforms and breach indicators.
• Exposure to OSINT and SOCMINT tools like Maltego, SpiderFoot, Shodan, URLScan, VirusTotal, Recorded Future, MISP or equivalent.
• Exposure to Blockchain basics including wallet addresses, transaction flows, exchanges, mixers and red flag indicators.
• Experience with social media monitoring, profile analysis, fake identity detection and online footprint mapping.
• Awareness of ethical, legal and terms-of-use boundaries for OSINT work.
• Ability to preserve web evidence through screenshots, timestamps, URLs and evidence notes.
• Understanding of threat actor TTPs, phishing infrastructure and brand impersonation indicators.
• Good report writing for intelligence leads, confidence levels and limitations.
• Python/scripting or API usage preferred.

C. Active / Preferred Certifications

• GSOA, GOSI, C|OSINT, GCTI, blockchain analytics, CEHv13, Security+ or equivalent active/valid certifications preferred.

D. Role Expectations and Requirements

• Produce open-source intelligence leads and clearly rate confidence.
• Support crypto tracing and domain/IP investigations.
• Preserve web evidence defensibly.
• Corroborate external intelligence with device, email and transaction evidence.
• Document lawful and ethical collection boundaries.
• Maintain link charts and attribution summaries.
• Escalate legal uncertainty or intrusive methods risk.
• Support cyber incident and fraud RCA with external context.
• Build reusable OSINT templates and checklists.
• Prepare concise intelligence notes for reports.
• Should be able to use Microsoft Copilot, ChatGPT, Claude, Gemini models usage
• Should be comfortable with Prompt engineering, RAG concepts, AI validation techniques, AI hallucination controls