Threat Researcher II (AEV)

Safe Security; Delhi; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Safe Security in New Delhi is seeking a Threat Research Engineer with 2–4 years of hands-on cyber security research experience. You will work with the Threat Research team on exploit writing, CVE identification, PoC testing, and lab setups using Metasploit/Nuclei.

Ideal candidates hold an engineering degree in CS/IT, show strong Hack The Box credentials, and can contribute to OSS projects while collaborating across fast-paced teams.

Qualifications

• M.Tech or B.Tech / B.E. / BCA in Computer Science or IT.
• Hands-on experience solving CTF challenges on Hack The Box.
• Minimum Pro HackerRank on Hack The Box required.
• Fully solved Pro labs on Hack The Box.
• Experience using LLMs for vulnerability research.
• Knowledge of port scanners, vulnerability scanners, exploitation frameworks.
• Familiar with MITRE CVE/NVD, CWE, CAPEC, ATT&CK.
• Able to work independently with minimal supervision.
• Effective communication and interpersonal skills.

Responsibilities

• Primary role with Threat Research team focusing on exploit writing and evaluations.
• Use vulnerability feeds to identify CVEs with PoC or working exploits.
• Set up an in-house vulnerable lab to test PoCs.
• Port exploits to Metasploit or Nuclei frameworks.
• Contribute back to Open Source exploit framework projects with Safe Security.
• Continual research on latest security trends and novel attacks from feeds.
• Collaborate with Threat Research and Programme Management teams.

Skills

CTF challenges

Hack The Box

Pro HackerRank

Labs solved

LLMs for vulnerability research

Vulnerability scanners

Port scanners

Exploitation frameworks

MITRE ATT&CK

Independent work

Communication skills

Education

M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology

Tools

Metasploit

Nuclei

Job description

Most boards and executives are currently flying blind when it comes to cyber risk. They are guessing. At Safe, we’ve built an AI-driven engine that finally gives the C-Suite a clear, quantified, and real-time view of their security posture. We don’t just provide data; we provide certainty.

We are a $170M Series C-funded category leader. We don’t play in the mid-market; we operate at the highest levels of global enterprise. Today, we are proud to serve 10% of the Fortune 500, protecting global icons such as Apple, Netflix, AT&T, Verizon, and Victoria’s Secret.

As we scale toward our next chapter, we are looking for high-performers who want to do the best work of their careers at the intersection of AI and Cybersecurity.

The Culture Memo: Our Operating System

Safe is not a typical corporate environment. We are a high-intensity, mission-driven team. We value builders who want to define a category and work alongside people who are equally committed to excellence.

• Extreme Ownership: We don’t do "not my job." We hire people who see a gap and own the solution from start to finish.
• The Elite Standard: We serve the most sophisticated companies on the planet. Our work must be bulletproof. Whether it’s a line of code or a sales deck, we aim for Tier-1 quality every time.
• Methodology & Rigor: We don’t wing it. From Force Management and MEDDICC in sales to data-driven sprints in engineering, we rely on proven frameworks to stay disciplined and predictable.
• Radical Candor: We move too fast for politics or sugar-coating. We value direct, honest feedback that helps us find the right answer quickly.
• The Series C Hustle: We have the stability of a well-funded leader but the heart of a startup.

The Perks & Ownership

We want our team to feel like owners because they are owners. We trust our people to manage their results and their time.

• Meaningful Equity: Every "Safestar" is a shareholder. You aren’t just an employee; you are a partner in our success.
• Unlimited Leaves: We don’t believe in clock-watching. We offer unlimited leave because we trust you to take the time you need to recharge while staying committed to the mission.
• Comprehensive Benefits: We provide top-tier medical insurance and wellness benefits to ensure you and your family are well cared for.
• Career Trajectory: We are growing aggressively. For high-performers, the path for advancement moves at the speed of your ambition.

Location: New Delhi

Experience: 2 to 4 years

Core Responsibilities

• Primary role is to work with the Threat Research team focussing on exploit writing and evaluations
• Utilize vulnerability and exploit intel feeds to identify CVEs that may have a working exploit or a PoC available publicly
• Setup an in-house vulnerable lab to try exploit PoC
• Port exploits to frameworks like Metasploit or Nuclei
• Contribute back to the Open Source exploit framework projects with Safe Security as the contributor
• Continuous research on latest security trends and novel attacks based on Threat & Vulnerability feeds
• Proactively collaborate within the Threat Research and the Programme Management team

Essential Skills, Experience and Qualifications

• M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology
• Must have hands‑on experience in solving CTF challenges on Hack The Box
• Must be minimum Pro Hacker rank on Hack The Box
• Must have fully solved pro labs on Hack The Box
• Must have experience in effectively utilizing LLMs for vulnerability research
• Hands‑on knowledge of port scanners, vulnerability scanners and exploitation framework
• Familiar with MITRE CVE/NVD, CWE, CAPEC, and ATT&CK framework
• Able to work independently with minimum supervision
• Effective communication and interpersonal skills

Any of the following certifications would be preferred:

• OSCP
• CPTS
• CRTO

If you’re passionate about cyber risk, thrive in a fast-paced environment, and want to be part of a team that’s redefining security.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.