Threat Hunting Analyst

ChainPatrol; India; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

ChainPatrol is a fully managed brand protection service. You will lead proactive threat discovery and analysis across the platforms our clients' attackers actually use.

That means finding what automated detection has not caught yet: new phishing infrastructure and impersonation campaigns across social media, ads, apps, etc. The role requires investigators who can map networks behind campaigns, connect signals across domains, social accounts, and hosting infrastructure, and feed lessons back into

Qualifications

• Good understanding in threat hunting, OSINT, or cyber investigations.
• Hands-on experience with tools like URLScan.io, passive DNS, and WHOIS.
• Ability to spot patterns across domains, infrastructure, and social activity.
• Experience with social media threat detection.
• Good analytical and problem-solving skills.
• Excellent written and verbal communication skills.

Responsibilities

• Identify and investigate malicious domains, URLs, phishing sites, and brand impersonation campaigns.
• Hunt for threats across social platforms including Meta, X, Telegram, LinkedIn, etc.
• Detect and analyze fake ads and scam campaigns
• Build threat actor maps by correlating infrastructure, registration patterns, and behaviors
• Use tools like URLScan.io, passive DNS, and other threat intelligence platforms in investigations
• Develop advanced sourcing queries and improve hunting workflows
• Produce clear, high-quality threat intelligence reports for customers

Skills

Threat hunting

OSINT

Cyber investigations

Tools

URLScan.io

Passive DNS

WHOIS

Job description

ChainPatrol is a fully managed brand protection service. We detect and remove impersonator accounts, phishing sites, fake apps, and scam infrastructure targeting our clients' customers and employees. Our AI + Team detects threats around the clock, review them and start the enforcement within minutes of discovery. We have removed more than 10 million threats for brands from Web3, Fintech, Banking, etc.

The Role

You will lead proactive threat discovery and analysis across the platforms our clients' attackers actually use. That means finding what automated detection has not caught yet: new phishing infrastructure, impersonation campaigns as they spin up across social media, ads, apps, etc.

The best people in this role think like investigators. A single fake domain is rarely a single fake domain. You will connect signals across domains, social accounts, ads, and hosting infrastructure to map the networks behind campaigns, and you will feed what you learn back into our detection logic so the next campaign gets caught automatically.

What You Will Do

• Identify and investigate malicious domains, URLs, phishing sites, and brand impersonation campaigns.
• Hunt for threats across social platforms including Meta, X, Telegram, LinkedIn, etc.
• Detect and analyze fake ads and scam campaigns
• Build threat actor maps by correlating infrastructure, registration patterns, and behaviors
• Use tools like URLScan.io, passive DNS, and other threat intelligence platforms in investigations
• Develop advanced sourcing queries and improve hunting workflows
• Produce clear, high-quality threat intelligence reports for customers

What We Are Looking For

• Good understanding in threat hunting, OSINT, or cyber investigations
• Hands-on experience with tools like URLScan.io, passive DNS, and WHOIS.
• Ability to spot patterns across domains, infrastructure, and social activity
• Experience with social media threat detection
• Good analytical and problem-solving skills
• Excellent written and verbal communication skills

Our detection operations run 24/7. This role requires flexibility to work in shifts, including some evenings, weekends, or holidays depending on rotation.