Threat Researcher I

Safe’s vision is to champion a safer digital future, and for that, we need a team that is par excellence. At Safe, you will be empowered with freedom and autonomy and pushed beyond your comfort zone more often. We offer the best you can have – unlimited leaves, work-from-anywhere, parental leave, and more. We are uncomfortably transparent, and for us, our culture is our strategy.

Location:

Core Responsibilities:

• The primary role is to work with the Threat Research team on security and risk quantification research work
• The secondary role of this profile is to assist senior researchers during the Red Team exercise
• Map various signals (vulnerabilities, misconfiguration issues, compliance framework controls, etc.) to the MITRE ATT&CK and D3FEND framework
• Research historic and new security breaches to identify attacker behavior based on ATT&CK as well as its detective controls based on D3FEND
• Continuous research on the latest security trends and novel attacks based on Threat & Vulnerability feeds
• Contribute the research work to MITRE and CTID initiatives
• Proactively collaborate within the Threat Research and the Programme Management team

Essential Skills/ Qualifications/ Experience:

• M.Tech or B.Tech / B.E. / BCA in Computer Science or Information Technology
• Must have hands-on experience in solving CTF challenges on platforms such as Hack The Box, Try Hack Me, and others
• Hands-on experience with tools such as Burp Suite, Nmap, Vulnerability Scanners, Enumeration, and Brute Forcing tools in Kali/Parrot OS, etc.
• Familiar with MITRE CVE/NVD, CWE, CAPEC, and ATT&CK framework
• Familiarity with code repository solutions would be a plus
• Working knowledge of scripting language (Python, Shell Script, JS, etc.) for automation
• Able to work independently with minimum supervision
• Effective communication and interpersonal skills

Any of the following certifications would be preferred:

• OSCP
• CRTE
• CRTO