We’re looking for a Security Research Intern to work on ENCLAY and maintain its open-source threat intelligence repository.

ENCLAY is an on-device Android security product focused on detecting and blocking stalkerware, spyware, banking trojans, infostealers and malicious infrastructure.

The internship will involve hands-on research across:

- Malware and Android security research
- Threat intelligence and OSINT
- Malicious domain and IP discovery
- C2 infrastructure research
- DNS, ASN and infrastructure analysis
- TLS, JA3 and JARM fingerprinting
- APK and Android malware research
- Threat intelligence validation
- Maintaining and expanding our open-source intelligence dataset
- Python scripting and automation

We're looking for someone who is genuinely curious about cybersecurity and enjoys investigating things independently. You should have a basic understanding of networking, DNS and Linux,



and be comfortable with Git/GitHub and Python. Experience with JADX, MobSF, apktool, Frida, VirusTotal, YARA, MISP, STIX/TAXII, JA3/JARM or similar tools is a plus. You don't need to know everything. A strong personal security project, GitHub repository, CTF work, malware analysis or security research write-up can be more valuable than certifications.

Internship details

Duration: 3 months

Stipend: ₹7,000/month

Location: Remote

This is a research-focused internship, not a SOC monitoring role. You’ll be expected to discover things, investigate them, understand the evidence, and turn that research into helpful threat intelligence.

ENCLAY: https://www.encryptlayer.net/

Intelligence Repository: https://github.com/ARPSyndicate/encryptlayer-intelligence

📌 Cyber Security Intern (EncryptLayer TI) (India)
🏢 ARPSyndicate
📍 India