3.7 Consultant - OSINT, Crypto & Threat Intelligence

Position Consultant - OSINT, Crypto & Threat Intelligence

Role / Level Consultant | Headcount: 1

Experience 3-5 years

Role Conduct open-source intelligence, dark-web surface checks, crypto tracing

support, domain/IP investigations and external attribution leads.

JD Focus

Conduct OSINT on suspects, domains, emails, mule indicators, phone

numbers and online identities.; Prepare link charts, attribution leads and

confidence-rated intelligence outputs.; Support crypto scam matters with wallet

transaction tracing and exchange/mule leads..

A. Job Description

• Conduct OSINT on suspects, domains, emails, mule indicators, phone numbers and online

identities.

• Prepare link charts, attribution leads and confidence-rated intelligence outputs.

• Support crypto scam matters with wallet transaction tracing and exchange/mule leads.

• Identify phishing, impersonation, deepfake infrastructure and brand abuse indicators.

• Preserve online evidence with screenshots, timestamps, URLs and evidence notes.

• Coordinate with mobile and endpoint teams to corroborate external intelligence.

• Document source reliability, collection method, limitations and legal caution.

• Support threat intelligence inputs for cyber incidents and fraud RCA.

• Assist analytics role in building graph views of actors, assets and transaction trails.

• Maintain reusable OSINT playbooks for Maharashtra cybercrime case typologies.

B. Qualifications and Skills

• BE/B.Tech/MCA/BSc IT/Cyber Forensic or equivalent technical background.

• 3-5 years in OSINT, cyber threat intelligence, fraud investigation, brand abuse, AML or

cybercrime support.

• Solid web investigation skills across domains, IPs, DNS, WHOIS, repositories, social





platforms and breach indicators.

• Exposure to OSINT and SOCMINT tools like Maltego, SpiderFoot, Shodan, URLScan,

VirusTotal, Recorded Future, MISP or equivalent.

• Exposure to Blockchain basics including wallet addresses, transaction flows, exchanges,

mixers and red flag indicators.

• Experience with social media monitoring, profile analysis, fake identity detection and online

footprint mapping.

• Awareness of ethical, legal and terms-of-use boundaries for OSINT work.

• Ability to preserve web evidence through screenshots, timestamps, URLs and evidence notes.

• Understanding of threat actor TTPs, phishing infrastructure and brand impersonation

indicators.

• Good report writing for intelligence leads, confidence levels and limitations.

• Python/scripting or API usage preferred.

C. Active / Preferred Certifications

• GSOA, GOSI, C|OSINT, GCTI, blockchain analytics, CEHv13, Security+ or equivalent

active/valid certifications preferred.

D. Role Expectations and Requirements

• Produce open-source intelligence leads and clearly rate confidence.

• Support crypto tracing and domain/IP investigations.

• Preserve web evidence defensibly.

• Corroborate external intelligence with device, email and transaction evidence.

• Document lawful and ethical collection boundaries.

• Maintain link charts and attribution summaries.

• Escalate legal uncertainty or intrusive methods risk.

• Support cyber incident and fraud RCA with external context.

• Build reusable OSINT templates and checklists.

• Prepare concise intelligence notes for reports.

• Should be able to use Microsoft Copilot, ChatGPT, Claude, Gemini models usage

• Should be comfortable with Prompt engineering, RAG concepts, AI validation techniques, AI

hallucination controls

📌 OSINT, Crypto & Threat Intelligence (Mumbai)
🏢 Hiring Squad
📍 Mumbai