15 Oct
|
NR Consulting
|
Hyderabad
15 Oct
NR Consulting
Hyderabad
Senior Researcher, Adversarial & Threat Intelligence
Location: Hyderabad
About the Role
We are looking for a senior researcher with a hacker mindset who owns our adversarial research strategy: how bots, scripted attacks, anti-detect browsers, and increasingly AI agents are used to spoof, suppress, or manipulate device and identity signals — and how we detect and counter that behaviour before attackers ship it at scale.
This role sits upstream of engineering, mirroring how the strongest device intelligence companies structure this work: you own the research strategy, run adversarial experiments, build prototypes and tooling, and hand validated detection techniques to engineering for productionisation. You will work alongside a parallel researcher focused on platform and protocol signal discovery, and collaborate with our data science function on the modelling and scoring layer.
What You Will Do
- Own research strategy for detecting sophisticated bots, scripted attacks, anti-detect browsers, and adversarial agent traffic across browser, network, and behavioural layers.
- Act as a creative technologist: explore how signals can be manipulated, spoofed, or suppressed by adversaries, and design counter-evasion techniques that are resilient by construction.
- Study how anti-detect browsers, sophisticated bots, scripted attacks, and malware behave; build detection hypotheses grounded in reverse engineering and threat analysis.
- Track emerging fraud tooling and the commercial anti-detect/automation ecosystem (browser automation frameworks, fingerprint-spoofing tools, residential proxy networks, agent-based automation) to anticipate where attackers are moving next.
- Investigate the agentic AI ecosystem from an abuse perspective — distinguishing legitimate agentic traffic (e.g. MCP-based clients) from malicious automation impersonating agents.
- Design and run adversarial experiments, build research tooling, and validate detection hypotheses with rigorous measurement.
- Build proof-of-concept detection logic and research tooling; document findings; hand validated techniques to engineering for productionisation.
- Partner with the data science function to hand off validated adversarial signals for scoring and modelling; you are not responsible for building or maintaining production ML models.
- Serve as the company-wide subject-matter expert for adversarial and cyber-threat research; produce detailed internal documentation and threat briefings.
Experience
- 8+ years in security research, fraud/abuse detection, or threat intelligence, with at least 3 years in a research-oriented role.
- Track record of public or internal research output (write-ups, technical blog posts, conference talks, or documented findings) is a robust plus.
Tech Skills — Must Have
- Deep expertise in bot/scripted-attack detection, anti-bot evasion and counter-evasion design, or malware/reverse-engineering analysis.
- Strong reverse-engineering skills, including JavaScript deobfuscation and instrumentation/emulator detection.
- Experience in malware analysis, bot/scripting detection, antivirus technology, or cyber-threat detection.
- Solid understanding of web security and privacy mechanisms, and how they interact with anti-detect and automation tooling.
- Strong programming skills in JavaScript/TypeScript plus at least one of Go, Python, Swift, or Kotlin; comfort writing non-production proof-of-concept code quickly.
- Ability to turn ambiguous problem statements into clear experiments with measurable outcomes; strong written and verbal communication in English.
- A genuine hacker mindset — curiosity about how systems are broken, comfort operating adversarially, and appetite for staying ahead of a moving target.
Tech Skills — Nice to Have
- Exposure to behavioural analytics or behavioural biometrics as a complementary signal domain (data science partners will own production modelling here).
- Familiarity with privacy regulation as it relates to threat detection and data handling.
- Working knowledge of agent protocols (MCP or similar) from a security/abuse perspective.
📌 Senior Researcher, Adversarial & Threat Intelligence (Hyderabad)
🏢 NR Consulting
📍 Hyderabad