About BrandLock

BrandLock is a revenue-protection platform for e-commerce merchants. We stop unwanted browser extensions and injected scripts — ads, coupon overlays, competitor price comparisons — from hijacking our clients’ online stores and leaking their revenue.

The Role

You will identify and classify the adware, malware and unwanted extensions that inject content into our clients’ websites, and help work out how to block them. This is a research and reasoning role: investigating unfamiliar domains, inspecting pages in DevTools, testing extension behaviour in the browser, and then working with QA to make sure what you found is genuinely blocked in production.

Ideal for freshers who are curious, analytical and want to build a career across security research, web technology and product quality.

What You’ll Do

- Analyse and categorise adware, malware and unwanted extensions by behaviour, type and risk level
- Classify resources collected from client sites at the domain and subdomain level — legitimate, unwanted, malicious or unknown
- Research unfamiliar domains in depth: who runs them, how they make money, and whether they belong on a client’s site
- Propose ways to block injected content — HTML/CSS selectors, DOM mutation detection, domain-level blocking, or new approaches you research yourself
- Investigate extensions that stop being blocked or start evading detection, and find the root cause
- Perform QA testing on our blocking product and work with the QA team to validate every rule before release




- Produce manual reports and visual evidence for clients and the Sales team — visiting client and prospect websites, reproducing injections, capturing and annotating screenshots, and compiling the findings into shareable reports and trackers
- Write scripts and SQL queries to automate parts of the classification workflow, and document findings clearly

What You’ll Need
- 0–2 years of experience — freshers are encouraged to apply. Bachelor’s degree in any discipline
- Strong analytical and logical reasoning — you can reach a defensible conclusion from partial evidence and explain how you got there
- A genuine research instinct and real attention to detail
- Fundamental knowledge of HTML, CSS and JavaScript
- Basic Python or equivalent scripting, and familiarity with SQL / databases
- Understanding of QA and testing fundamentals
- Comfort with browser developer tools
- Transparent written and verbal communication — your findings go to Engineering, QA and Sales

Nice to Have
- Exposure to browser extensions, DOM APIs such as MutationObserver, or browser automation (Selenium / Playwright)
- Basic understanding of malware and adware categorisation
- Awareness of digital advertising, affiliate marketing or the coupon ecosystem
- Any internship or project work in web research, QA, data annotation or security

Please Note This is not an antivirus or reverse-engineering role. You will not be analysing binaries, writing YARA rules or publishing threat intelligence. You will be classifying browser extensions, scripts and domains, and researching new ways to block them.

Pay: ₹18,000.00 - ₹25,000.00 per month

Work Location: In person

📌 Junior Malware Analyst — Adware & Extension Research (QA) (Mumbai)
🏢 BrandLock
📍 Mumbai