Threat Research Analyst

ZeroFox, a leading external cybersecurity firm based in Bengaluru, India, is seeking a motivated and experienced Threat Research Analyst. This role is vital for enhancing our understanding of the dynamic threat landscape, with a particular emphasis on phishing and online scams. The ideal candidate will possess strong analytical skills, a passion for dissecting attacker methodologies, and a proven background in cyber threat research.

Responsibilities include:

• Conducting in-depth investigations into the Tactics, Techniques, and Procedures (TTPs) of threat actors in phishing and online scam campaigns.
• Developing actionable threat intelligence and proposing innovative detection strategies.
• Supporting efforts to disrupt malicious activities.
• Proactively engaging in threat hunting and staying ahead of emerging online threats within our Product team.

Requirements:

• 5-7 years of experience in cyber threat intelligence, threat research, or security analysis, focusing on phishing, fraud, or online scams.
• Proven ability to analyze complex threat data and identify patterns.
• Strong understanding of attack vectors, malware, and network protocols.
• Proficiency in OSINT techniques and tools.
• Familiarity with threat intelligence frameworks (MITRE ATT&CK, Cyber Kill Chain, Diamond Model).
• Experience with threat intelligence and security operations toolsets.
• Intermediate to advanced scripting skills (Python, PowerShell) for data analysis and automation are highly desirable.
• Knowledge of email security protocols (SPF, DKIM, DMARC).
• Understanding of web technologies (HTML, CSS, JavaScript) and their exploitation in scams.
• Exceptional analytical and critical thinking skills.
• Strong problem-solving abilities and meticulous attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently and collaboratively in a fast-paced environment.
• High degree of curiosity and a continuous learning mindset.

Educational Background:

• Bachelor's degree in Cybersecurity, Computer Science, IT, Information Security, or equivalent experience.
• Relevant industry certifications (CTIA, CompTIA Security+, GIAC GCTI) are highly preferred.
• A Master's degree in a related field is a plus.

Benefits:

• Competitive compensation
• Community-driven culture
• Generous time off
• Best-in-class benefits
• Fun, modern workspace
• Respectful and nourishing work environment