Cyber Intelligence Analyst jobs in Delhi at CryptoMize are open on a rolling, always-hiring basis. This is a full-time, permanent position with immediate joining, sitting inside the cybersecurity and intelligence cells that power the S3-SENTINEL and CLAIRVOYANCE CX platforms for political, healthcare, and enterprise clients across 18 countries. The senior analyst owns the threat-intel workstream for one or two engagements end-to-end — from pipeline maintenance to client-brief delivery — and the same operational model applies as every other cell: capacity is hired ahead of the next engagement, not after. Below is the complete job description, the responsibilities you will own from day one, the requirements, the seniority path, and the selection process. Experienced analysts who want their work to mean something — IOCs that flowed into a client briefing, threat profiles that shaped a political engagement — should read to the end.

LOCATION New Delhi (HQ)

EMPLOYMENT Full time · Permanent

AVAILABILITY Immediate · Rolling intake

COMPENSATION Discussed at screening

TRACKS ON THIS DESK35

CRAFT SKILLS NAMED13

TOOLS & SYSTEMS5

PATH STAGES4

01

01The actual work

What will you actually do as a Cyber Intelligence Analyst at CryptoMize?

01

Own the threat-intel workstream for one or two live client engagements — pipeline maintenance, IOC correlation, threat-actor profiling, and client-brief delivery

02

Set and maintain the cell’s credibility-scoring model — the discipline that separates real threats from noise across the client portfolio

03

Design the cell’s collection architecture for new engagements — feeds, OSINT coverage, dark-web monitors, and the bespoke tooling the engagement demands

04

Deliver the recurring threat products: daily situational reports, weekly cross-cell reviews, and quarter-scale threat-landscape narratives for client leadership

05

Mentor the analyst interns attached to your engagements — intern-to-analyst conversion is a hiring channel the cell directly strengthens

06

Sit in client briefings as the threat voice — when a client asks "is this real or noise," you answer with the IOC trail and the source stack

07

Work at the intelligence center of a portfolio that covers 18 countries, including political-campaign threats, healthcare-sector incidents, and brand-impersonation events — your analyst discipline becomes part of the engagement record the cell carries forward

ROLE RESPONSIBILITIES

As a Cyber Intelligence Analyst at CryptoMize you will own the threat-intel workstream for live client engagements end-to-end — pipeline maintenance, IOC correlation, threat-actor profiling, and client-brief delivery. The cell applies the same quality discipline as the analytics and engineering cells: every finding that goes to a client must be reconstructable line by line, and the credibility-scoring model is the discipline that makes that possible.





Senior analysts also carry the institution’s response posture — when a client engagement escalates, the senior is the cell’s point of accountability for the threat picture, the IOC trail, and the briefing that follows. The cell runs the same operational model as every other CryptoMize cell: capacity is hired ahead of the next engagement, not after, and the work that ships under the senior’s name in the program is the work that decides the next offer.

The cyber intelligence analyst review cycle records terminology discipline for Cyber Intelligence Analyst seats — in every review packet

02

02Capability profile

What skills and tools does a Cyber Intelligence Analyst need?

Craft skills13

Tools & systems5

Offer standards4

Senior threat-actor profiling — TTPs, infrastructure, motivations, the analyst mindset that ties indicators to actor-level understanding at scaleMISP operations — feed integration, galaxy-cluster maintenance, correlation-engine tuning, the discipline of running MISP as a production tool not a toyOSINT collection discipline — sourcing, verification, trail-building, the rigor that lets a finding be re-verified months later by a different analystReporting at the senior level — short situational reports the strategist takes to clients unchanged, longer-form threat assessments that become part of the engagement portfolioIndicator correlation at scale — pivoting across feeds, spotting the same infrastructure or persona across unrelated sources, the judgment to know when correlation is signal vs noiseTool fluency — Python and SQL for pivot queries, regex for IOC extraction, REST API for tool integration, the discipline of choosing the right tool for each questionDark-web monitoring — Tor browser hygiene, hidden-service tracking, OPSEC-aware collection, the discipline of never breaking your own coverDisinformation analysis — narrative tracing, amplification-path mapping, the analyst skill of identifying bot vs organic origin in a contested conversationDiscipline of NDA-grade client material — every indicator logged, every source traceable, every engagement flag-time recordedBilingual source handling where the engagement crosses languages (the cell works with regional translators when sources are not in English)Client-facing communication — defending a finding under skeptical questioning, walking a client through the IOC trail in a briefingMentorship — the discipline of teaching analyst interns the way the senior analyst was taught, with the same review cadence and the same expectationsDomain curiosity — political, healthcare, enterprise,



the subject changes weekly and the analyst adapts

MISP (Malware Information Sharing Platform) — the cell’s primary IOC store and correlation engine, with the full operational stackMISP galaxy cluster model for threat-actor and campaign-taxonomy classificationPython 3.11 + pandas for IOC aggregation, pivot queries, and report automationMISP-feed integration — STIX/TAXII import pipelines and the feed-credibility scoring modelOSINT framework — Maltego for link analysis, Shodan-class exposure scanning, the cell’s custom monitoring stack

Depth of demonstrated skill in the specific role disciplineClassification and scope of the client engagement the role supportsUrgency and time-sensitivity of active project requirementsTrack record built across CryptoMize engagements

Also known as: cyber intelligence analyst jobs · threat intelligence jobs · cyber threat analyst jobs · threat intel vacancy

03

03Seniority ladder

Cyber Intelligence Analyst — seniority path at CryptoMize

Analysts advance by the quality of the threat picture they produce, not tenure. The ladder below is how the cyber intelligence cell is actually organized.

- Cyber Intelligence Analyst

Owns the IOC pipeline and engagement threat products for one or two live client engagements. The execution backbone of the cell.

1/4

- Senior Cyber Intelligence Analyst

Designs the cell’s collection architecture, leads threat-actor deep-dive work, signs off on client-brief threat content, and mentors the cell’s analyst interns.

2/4

- Cyber Intelligence Lead

Runs the cell — staffing, methodology, and final accountability for every threat brief that reaches a client. Sets the credibility-scoring model the entire cell lives by.

3/4

- Intelligence Strategist

The crossover track: cyber intelligence leaders who grow into engagement strategy, translating threat work into the counsel clients act on. The cell’s pipeline produces them.

4/4

04

04The engagement surface

CryptoMize work a Cyber Intelligence Analyst touches

Every role plugs into live engagements across the five Penta-P domains — these are the services your work feeds.

Cyber Intelligence Analyst · Job Opening

This seat plugs into 5 live CryptoMize services across the five Penta-P domains — the work below is where yours lands.

5 SERVICESPENTA-P

- OSINT
- Strategic Intelligence
- Predictive Intelligence
- Cybersecurity
- Threat Analysis

WHAT DOES CYBER INTELLIGENCE ANALYST COMPENSATION DEPEND ON?

Compensation is discussed during screening — never a fixed public figure, because it varies per person and per engagement. It depends on:

#

OFFER CONSTRUCTION FACTOR

01

Depth of demonstrated skill in the specific role discipline

02

Classification and scope of the client engagement the role supports

03

Urgency and time-sensitivity of active project requirements

04

Track record built across CryptoMize engagements

📌 Cyber Intelligence Analyst (India)
🏢 Crypto Mize
📍 India