← All roles

Senior Researcher - Dark Web & Threat Intelligence

Cyble· Engineering
Apply on company site
Hybrid (Bengaluru)$15k - $35kFull-timePosted 4mo ago

About the role

Senior threat intelligence role focused on dark web monitoring, threat actor engagement, and production of advisories and reports to support Cyble’s sales and pre-sales teams.

Responsibilities

  • Monitor dark web forums, Telegram channels, and ransomware/extortion group sites daily for intelligence on prospects and notable events.
  • Engage threat actors (TA engagement / HUMINT) to gather intel on private data leaks; target several successful engagements per week.
  • Validate data leaks and TA claims to determine legitimacy.
  • Deanonymize threat actors: link aliases, accounts, and personas to real-world identities.
  • Produce advisories and flash alerts for significant leads, and contribute blogs and quarterly reports (e.g., ransomware and regional dark web roundups).
  • Map a prospect's real attack surface (subsidiaries, parent companies, subdomains, and vulnerable login portals).
  • Analyze raw breach datasets and corroborate findings before publication.
  • Own the request queue: triage, scope, route, and track deliverables against due dates.
  • Review and quality-check findings and reports before stakeholders receive them.
  • Mentor junior researchers and raise the bar on tradecraft and writing.
  • Run daily async standups and weekly team reviews; keep stakeholders informed.
  • Coordinate with sales and relationship managers on account-specific needs (report depth, scope, timelines).

Qualifications

  • 4+ years in threat intelligence, dark web research, OSINT, or intelligence operations, including senior or lead-level work.
  • Deep hands-on familiarity with dark web forums, marketplaces, and Telegram-based trading of compromised data.
  • Strong TA engagement / HUMINT experience, with sound operational security and source-handling discipline.
  • Solid OSINT tradecraft: people and entity research, social media and search-operator (dork) techniques, and corroboration.
  • Comfort with raw breach data: structure, validation, and victim mapping.
  • A track record of impactful findings.
  • Experience guiding or mentoring other researchers and owning a quality bar.
  • Driven to keep learning and stay current on latest research techniques and tools.
  • Ability to use AI tools effectively to speed up research, analysis, and writing.
  • Strong communication, within the team and with executives; ability to translate technical findings into defensible business impact.

Skills

Required:Threat intelligenceTA engagement / HUMINTOSINTData validation / breach data analysisMentoring / Leadership
Nice to have:AI tools for research/writing

Benefits

  • All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected Veteran status age, or genetics, or any other characteristic protected by law.
Last updated Sep 23, 2026. Interested? Apply on the company site.
Cyble logo

About Cyble

Cyble - World’s First Intelligence-Driven, AI-Native Security…

To reimagine cybersecurity with an AI-native platform that unifies detection, protection and remediation across the digital attack surface Headquartered in Alpharetta, Georgia, and with offices in Australia, Malaysia, Singapore, Dubai, Saudi Arabia and India, Cyble has a global presence. To learn more about Cyble, visit www.cyble.com. 

saassecurityai
Company profileWebsite

More open roles at Cyble