WHO ARE WE?

We are a bunch of super enthusiastic, passionate, and highly driven people, working to achieve a common goal! We believe that work and the workplace should be joyful and always buzzing with energy!

CloudSEK , one of India’s most trusted Cyber security product companies, is on a mission to build the world’s fastest and most reliable AI technology that identifies and resolves digital threats in real-time. The central proposition is leveraging Artificial Intelligence and Machine Learning to create a quick and reliable analysis and alert system that provides rapid detection across multiple internet sources, precise threat analysis, and prompt resolution with minimal human intervention.

Founded in 2015, headquartered at Singapore, we are proud to say that we’ve grown at a frenetic pace and have been able to achieve some accolades along the way, including:

CloudSEK’s Product Suite:

- CloudSEK XVig il constantly maps a customer’s digital assets, identifies threats and enriches them with cyber intelligence, and then provides workflows to manage and remediate all identified threats including takedown support.
- A powerful Attack Surface Monitor i ng tool that gives visibility and intelligence on customers’ attack surfaces. CloudSEK 's BeVig il uses a combination of Mobile, Web, Network and Encryption Scanners to map and protect known and unknown assets.
- CloudSEK’s Contextual AI SVi gil identifies software supply chain risks by monitoring Software, Cloud Services, and third-party dependencies.

Key Milestones:

- 2016: Launched our first product.
- 2018: Secured Pre-series A funding .
- 2019: Expanded operations to India, Southeast Asia, and the Americas.
- 2020: Won the NASSCOM-DSCI Excellence Award for Security Product Company of the Year.
- 2021: Raised $7M in Series A funding led by MassMutual Ventu r es.
- Awards & Recognition: Won NetApp Excellerator's "Best Growth Strategy Award," CloudSEK XVigil joined NVIDIA Inception Program, and won the NASSCOM Emerge 50 Cybersecurity Award .
- 2025: Secured $19 million in funding led by Tenacity Ventures, Commvault.

The Role:



We are seeking a highly motivated and analyt ical Threat Intelligence Resea rcher to join our Global Threat Intelligence Team. The researcher will focu s on tracking global threat act ivity, inclu ding ransomware opera ti ons, cybercrime ecosys tems, etc., through a combinatio n of infrastructure ana ly sis, IAV (Initial Access Vector) ma pping, and cyber HUMINT source develo pment. The role requires a strong gras p of MITRE ATT&a; mp ;CK, MITRE E ngage, the Diamond Model, and the Cyber Kill Chain, applied in operational and strategic research contexts.

Key Responsibilities

- Co nduct ransomware IAV (Initial Access Vector) m apping to understand infiltration patterns, affiliate ecosystems, and monetisation structures.
- Pe rform e-crime and underground forum re search to identify, profile, and map threat actors (TAs), their infrastructure, tools, and tradecraft.
- Execute infrastructure h unting campaigns focusi ng on APT and e-crime C2 fram eworks, leveraging passive DNS, TLS certificates, and web fingerprinting techniques.
- Develop and maintain cyber HUMINT s ources, focusing on early warning, infiltration, and intelligence collection aligned with organisational goals.
- Correlate and analyse global threat cam paigns across ransomware, APT, and access broker ecosystems to identify shared TTPs and infrastructure linkages.
- Apply analytical models su ch as MITRE ATT& am p;CK, MITRE En gage, Diamond Model , and Cyber Kill Chain to develop structured threat intelligence outputs.
- Pr oduce tactical, operational, and strategic intelligence r eports with actionable recommendations for global stakeholders.
- Contribu te to tooling, automation, and methodology devel opment for IAV mapping, C2 identification, and infrastructure clustering.

Required Skills & Experience:





- 3+ years of experience in threat intel li gence, malware a na lysis, threat hunti ng, or digital investi gations.
- Proven experie nce in tracking ransomware g roups, access broke rs, or APT ca mpaigns through open-source, dark web, and technical telemetry.
- Deep understand ing of MITRE ATT &a; mp;CK, MITRE E ngage, Diamon d Mode l, and Cyber Kill Chain frameworks.
- Familiarit y with C2 fra meworks (e.g., Cobalt Strike, Mythic, Sliver, Quasar, etc.) and infrastructure hunting methodologies.
- Practical experienc e with IAV a nalysis, including exploitation of vulnerabilities, phishing, and social engineering vectors.
- Strong OSINT and technical investigation skills (Shodan, Censys, FOFA, Netlas, VirusTotal, Hybrid Analysis,etc.).
- Experie nce in cyber HUMINT or engagement within closed threat actor comm unities is a strong plus.
- Ability to synthesise complex datasets into coherent, high-quality intelligence products.
- Excellent written and verbal communication skills for both technical and executive audiences.

Preferred Qualifications:

- Background in incident re sponse, reverse eng ineer ing, or network analysis.
- Experience with Python or automation s cripting for data enrichment and infrastructure correlation.
- Prior contributions to threat research publ ications, advisories, or CTI community initiatives.

What we offer: We provide an environment where you can develop and enhance your skills while delivering meaningful work that matters. You’ll be rewarded a market-competitive salary as well as a full spectrum of generous perks and incentives which include:

- Flexible working hours.
- Food, unlimited snacks and drinks are all available while at office.

And, the finest part is yet to come! Every now and then we ensure to unwind and have a good time together, which involves games, fun, and soulful music. Feel free to show off your artistic side here! CloudSEK is an equal opportunity employer and is committed to building a diverse and inclusive workplace. We encourage candidates from all backgrounds to apply.

📌 Global Threat Intelligence Researcher (Bengaluru)
🏢 cloudsek
📍 Bengaluru