Senior Threat Intelligence Researcher at Arctic Wolf in Bengaluru

Job description

#RunwiththePack At Arctic Wolf, we’re on a mission to end cyber risk . We are a global leader in security operations, helping organizations stay resilient against evolving cyber threats through industry-leading security operations, threat intelligence, and a people-first approach to cybersecurity. More than 3,000 Pack members across the world work together every day to protect our customers and empower security teams with new levels of speed, accuracy, and intelligence at scale. What sets us apart is our relentless focus on our customers, innovation at scale, and a collaborative culture where talented people can do meaningful work that truly makes a difference. We’re constantly looking for talented people to join the Pack and help us take our performance to the next level. About the Position: We are looking for a Senior Threat Intelligence Researcher to help achieve this mission. The Senior Threat Intelligence Researcher will contribute to our Threat Intelligence organization by leading advanced cyber threat intelligence research and translating adversary insights into measurable defensive outcomes. This role focuses on deep technical analysis, adversary tracking, intelligence-driven detection, and operational collaboration to improve threat visibility, detection coverage, and incident response effectiveness across the organization. As a senior technical authority, this role will shape intelligence methodologies, establish analytical standards, mentor peers, and deliver actionable intelligence that directly strengthens Arctic Wolf’s security operations and customer protection capabilities. IN THIS ROLE, YOU WILL: Threat Intelligence Research and Adversary Tracking Lead and contribute to threat actor, malware family, and campaign tracking by correlating malware samples, infrastructure, delivery mechanisms, and adversary tradecraft. Own end-to-end cyber threat intelligence investigations, from initial research and hypothesis development through validation, reporting, and operational implementation. Conduct cyber threat intelligence research aligned with established frameworks such as the Cyber Threat Intelligence lifecycle, MITRE ATT&CK, and the Diamond Model. Perform static and dynamic malware analysis across malicious binaries, scripts, and document-based delivery mechanisms. Investigate malicious network infrastructure and command-and-control activity by pivoting across domains, Internet Protocol addresses, certificates, and related artifacts. Apply advanced open-source intelligence techniques, pivoting methodologies, and enrichment across multiple intelligence platforms and data sources. Research Deep Web ecosystems, including crimeware-as-a-service and ransomware-as-a-service operations, to identify emerging threats, adversary relationships, and evolving attack methodologies. Analyze Windows and macOS internals, including application programming interfaces, obfuscation techniques, system calls, and execution behaviors. Analyze and correlate large-scale datasets using Structured Query Language, Python, or Excel to identify patterns, generate actionable intelligence, and support evidence-based decisions. Intelligence-to-Detection and Operational Impact Translate intelligence findings into actionable detection and threat hunting logic using technologies such as YARA, Sigma, and Suricata. Own the lifecycle of intelligence-driven detection improvements, from identifying intelligence gaps and developing detection hypotheses to validating coverage and measuring operational effectiveness. Take accountability for ensuring that intelligence findings are translated into practical defensive improvements rather than remaining limited to research reports or theoretical assessments. Develop intelligence-to-detection feedback loops that identify coverage gaps, assess detection effectiveness, and continuously improve defensive capabilities. Partner closely with Security Operations Center and Managed Detection and Response teams to operation