Senior Security Researcher

Designation / Title

Senior Security Researcher

Experience (Years)

5+ Yrs

Joining Location

Pune, Bangalore

About Quick Heal

Quick Heal Technologies Ltd, founded in 1995 and headquartered in Pune, is India’s leading listed cybersecurity solutions provider with 23 offices and 1,000+ professionals. Through its enterprise arm Seqrite, the company delivers cutting-edge Zero Trust solutions to secure endpoints, data, networks, and users across industries and geographies.

Seqrite Labs powers its offerings with advanced threat research, intelligence, and real-time detection. Notably, Seqrite secured ISRO’s command & control center during the Chandrayaan 3 mission. Its services division provides consulting to corporates, PSUs, government, and law enforcement agencies worldwide.

Core Purpose: Innovate to simplify digital security
Vision: To be trusted globally as a cybersecurity leader
Mission: Empower teams to solve business problems

Seqrite stands out as a purpose-led organization that invests in people, fosters innovation, and offers opportunities to work on new technologies while building a safer digital world.

Job Summary

(A brief overview of the role, its purpose, and key responsibilities.)

The individual in this role will be at the forefront of our cyber security research, leading the charge in proactive threat hunting and intelligence gathering.

Job Responsibilities

(The key tasks and duties you will be expected to perform in this role.)

1.      Hunt for elusive APTs: Employ your expertise in advanced attack techniques and methodologies to proactively identify and disrupt ongoing APT campaigns before they wreak havoc.

2.      Deep dive into the darkweb and hidden forums: Uncover the latest whispers, chatter, and indicators of compromise (IOCs) used by advanced attackers.

3.      Conduct in-depth malware analysis: Analyze suspicious files, reverse engineer code, and dissect malicious payloads to understand attacker motives and capabilities.

4.      Craft high-fidelity detections: Translate your findings into actionable indicators and rules that empower our security systems to automatically detect and block future threats.

5.      Develop and maintain threat intelligence: Build a comprehensive understanding of the evolving threat landscape, curate valuable intel reports, and share insights across the organization.

6.      Collaborate with cross-functional teams: Partner with security analysts, incident responders, and product developers to share intel, refine defenses, and improve overall security posture.

7.      Stay ahead of the curve: Continuously learn and adapt to the ever-changing threat landscape, attending conferences, participating in research communities, and keeping your finger on the pulse of emerging threats.

8.      Perform event correlation analysis: Gather data from a variety of sources to detect and confirm attacks. Work on internal automation projects to aid in threat hunting activities.

9.      Write blogs and whitepapers related to advanced threat analysis and present the research at various cybersecurity conferences.

Must Have Skills
(The essential skills and expertise required to succeed in this role.)

1.      5+ years of hands-on experience in cyber security research, threat hunting, or cyber threat adversarial investigations.

2.      Map threat actor behavior to MITRE ATT&CK framework, identifying, tracking and analyzing specific APT groups, their infrastructure, and evolving TTPs over time.

3.      Proven ability to connect disparate pieces of intelligence to form a cohesive understanding of a threat actor's campaign.

4.      Serve as an escalation point for complex security incidents and mentor junior threat analysts on advanced research methodologies.

5.      Deep understanding of STIX objects and relationships (SDO, SCO, SRO), malware analysis techniques (dynamic, static) and reverse engineering.

6.      Hands on experience with tools like – Maltego, MISP, Shodan, OpenCTI or equivalent Threat Intelligence Platforms, VirusTotal, IDA Pro/Ghidra, Wireshark, etc.

7.      Familiarity with darkweb investigations, forums, and threat marketplaces.

8.      Excellent communication and collaboration skills to work across teams.

9.      Knowledge of threat intelligence methodologies and industry standard frameworks.

10.Strong scripting (e.g., Python, PowerShell) and automation skills.

11.Experience writing YARA or IDS/IPS signatures.

12.Excellent reporting and analytical skills: Able to author comprehensive, actionable threat intelligence reports and briefings to effectively share insights.

Nice / Good to have skills

(Additional skills that are not mandatory but give you an added advantage in this role.)

1.      Experience with threat hunting tools and frameworks.

2.      Experience with cloud security and threat intelligence platforms.

3.      Any cybersecurity certification/Masters Degree in Cybersecurity/Information Security.