About the Role : HEROIC Cybersecurity ( HEROIC.com ) is seeking a senior-level Threat Intelligence Data Engineer - Automated Collection Dark Web Intelligence to design, build, and operate fully automated intelligence collection systems that power our AI-driven cybersecurity and breach intelligence platforms.

This role owns the end-to-end discovery, acquisition, and ingestion pipeline for continuously discovering, crawling, extracting, indexing, and normalizing millions of current artifacts daily including documents, chats, forums, leaked datasets, repositories, threat actor communications, hacker marketplaces, unsecured infrastructure, and decentralized networks across the surface web, deep web, dark web, and anonymized networks .

Our Threat Research Teammission is aggressive: achieve near-total coverage of global breach and leak data with 99%+ automation . Your work directly enables HEROICability to identify exposures before they are weaponized.

What You Will Do:

Automated Intelligence Collection Discovery

- Architect and operate large-scale, distributed crawling and discovery systems across:

- Surface web, deep web, and dark web

- Hacker forums, underground marketplaces, and breach communities

- Chat platforms (Telegram, Discord, IRC, WhatsApp, etc.)





- Paste sites, code repositories, and social platforms used for breach disclosure

- Continuously discover, archive, and download newly released datasets, logs, credentials, and artifacts the moment they appear

Dark Web, Anonymized Decentralized Networks

- Build automated collectors and archivers for anonymized and decentralized networks including:

- Tor (.onion), I2P, ZeroNet, Freenet, IPFS, GNUnet, Lokinet, Yggdrasil, and similar systems

- Design resilient workflows for unreliable, adversarial, or ephemeral data sources

- Normalize and index data from non-traditional network protocols and formats

Infrastructure Exposure Discovery

- Develop automated scanning systems to identify:

- Unsecured databases (Elasticsearch, MySQL, PostgreSQL, MongoDB, etc.)

- Exposed cloud storage (S3, Azure, GCP, DigitalOcean Spaces)

- Open FTP servers, backups, and misconfigured archives

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Threat Intelligence Data Engineer (Maharashtra)
🏢 HEROIC Cybersecurity
📍 Maharashtra