Threat Researcher II

Safe Security; Delhi; On-site; INR 1,800,000 - 3,200,000; Full time

Benefits offered by this job

Meaningful Equity

Unlimited Leaves

Comprehensive Benefits

Career Trajectory

Job summary

Safe Security in Delhi seeks a Threat Research Engineer to focus on exploit writing and evaluations, and to set up an in-house lab for PoC testing. You will port exploits to Metasploit and Nuclei, and contribute back to Open Source exploit frameworks as a Safe Security contributor.

Strong security research experience with Hack The Box (CTF, labs, ranks) and familiarity with MITRE ATT&CK, CVE/NVD, CWE, CAPEC is required. Independent work style and clear communication are valued.

Qualifications

• Hands-on solving of CTF challenges on Hack The Box.
• Experience with vulnerability research and exploit workflows.
• Familiarity with vulnerability exploitation frameworks.

Responsibilities

• Primary role is to work with the Threat Research team focusing on exploit writing and evaluations.
• Use vulnerability feeds to identify CVEs with working exploits or PoCs.
• Set up an in-house vulnerable lab to test PoCs.
• Port exploits to Metasploit or Nuclei.
• Contribute to Open Source exploit frameworks with Safe Security.
• Research latest security trends and novel attacks from threat feeds.
• Collaborate with Threat Research and Programme Management.

Skills

HTB CTF

Pro HTB rank

Hack The Box labs

LLMs in security

Port scanners

Vuln scanners

Exploitation frameworks

MITRE ATT&CK

Independent worker

Communication

Education

M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology

Job description

Culture Memo: Our Operating System

• Extreme Ownership: We don’t do "not my job." We hire people who see a gap and own the solution from start to finish.
• The Elite Standard: We serve the most sophisticated companies on the planet. Our work must be bulletproof. Whether it’s a line of code or a sales deck, we aim for Tier‑1 quality every time.
• Methodology & Rigor: We don’t wing it. From Force Management and MEDDICC in sales to data‑driven sprints in engineering, we rely on proven frameworks to stay disciplined and predictable.
• Radical Candor: We move too fast for politics or sugar‑coating. We value direct, honest feedback that helps us find the right answer quickly.
• The Series C Hustle: We have the stability of a well‑funded leader but the heart of a startup.

Perks & Ownership

• Meaningful Equity: Every "Safestar" is a shareholder. You aren’t just an employee; you are a partner in our success.
• Unlimited Leaves: We don’t believe in clock‑watching. We offer unlimited leave because we trust you to take the time you need to recharge.
• Comprehensive Benefits: We provide top‑tier medical insurance and wellness benefits to ensure you and your family are well cared for.
• Career Trajectory: We are growing aggressively. For high‑performers, the path for advancement moves at the speed of your ambition.

Core Responsibilities

• Primary role is to work with the Threat Research team focussing on exploit writing and evaluations.
• Utilize vulnerability and exploit intel feeds to identify CVEs that may have a working exploit or a PoC available publicly.
• Set up an in‑house vulnerable lab to try exploit PoC.
• Port exploits to frameworks like Metasploit or Nuclei.
• Contribute back to the Open Source exploit framework projects with Safe Security as the contributor.
• Continuous research on latest security trends and novel attacks based on Threat & Vulnerability feeds.
• Proactively collaborate within the Threat Research and the Programme Management.

Essential Skills, Experience And Qualifications

• M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology.
• Must have hands‑on experience in solving CTF challenges on Hack The Box.
• Must have minimum Pro Hacker rank on Hack The Box.
• Must have fully solved at least 1 pro lab on Hack The Box.
• Must have experience in effectively utilizing LLMs for vulnerability research.
• Hands‑on knowledge of port scanners, vulnerability scanners, and exploitation frameworks.
• Familiar with MITRE CVE/NVD, CWE, CAPEC, and ATT&CK framework.
• Able to work independently with minimum supervision.
• Effective communication and interpersonal skills.

Preferred Certifications

• OSCP
• CPTS
• CRTO