Should work in rotation shifts from 6PM to 3AM IST or 1AM to 9AM IST.

About the Role:

Loginsoft's AI-powered scanner analyzes thousands of open source packages and extensions daily, flagging potential malware, supply chain attacks, and suspicious behavior across npm, PyPI, Chrome extensions, VS Code extensions, and more.

As a Human-in-the-Loop (HITL) Threat Analyst, you are the critical human judgment layer in this pipeline. Your role is to review AI-flagged threats in real time, make fast and accurate triage decisions, escalate high-severity findings, and ensure the feed maintains the quality standard that Loginsoft's customers depend on.

This is a 12/7 operation. You will work rotating shifts between 6PM to 9AM IST to provide continuous coverage of the threat feed. Shift schedules are designed for global coverage across time zones.

What youll do:Threat Triage & Review

- Review AI-flagged packages and extensions in real time confirm, dismiss, or escalate each finding with documented reasoning.
- Apply consistent triage standards to classify threats: malware, typosquatting, dependency confusion, data exfiltration, obfuscated code, and other supply chain attack patterns.
- Perform quick static analysis on flagged code snippets to validate or override AI assessments.
- Maintain a high-volume review throughput without sacrificing accuracy — quality is the benchmark

Escalation & Communication

- Escalate critical or novel threats immediately to the senior Threat Research team using defined severity protocols.
- Write explicit,



concise triage notes for each reviewed item — decisions must be auditable and informative for downstream teams.
- Flag patterns or campaigns that emerge across multiple packages for deeper investigation.

Quality & Feedback Loop

- Identify and report false positives/negatives in the AI scanner to help improve model accuracy.
- Contribute structured feedback to the ML/detection engineering team on edge cases and novel patterns.
- Follow and help refine triage playbooks as the threat landscape evolves.

Shift Operations

- Adhere to shift handover protocols — document open items, in-progress reviews, and any escalations for the incoming analyst.
- Maintain situational awareness of the threat feed volume and velocity throughout your shift.
- Participate in periodic sync calls with the Threat Research team to align on emerging threats and priority changes.

Required skills:

- 2+ years of experience in a security operations, threat analysis, or malware analysis role.
- Solid understanding of open source package ecosystems (npm, PyPI, RubyGems, etc.) and how supply chain attacks work.
- Ability to read and understand code in at least one scripting language (JavaScript/TypeScript, Python, Bash) — enough to spot obfuscation, exfiltration patterns, and suspicious behavior.
- Strong written communication skills — you'll be writing triage notes that others rely on.
- Comfort working independently during off-hours shifts with minimal supervision.
- Reliability and punctuality — 24/7 coverage only works if shifts are honored.

📌 Malware Analyst (Hyderabad)
🏢 Loginsoft
📍 Hyderabad