{"id":1253027,"url":"https://alion.io/job/people-gamut-security-researcher","title":"Security Researcher","company":{"id":3806610,"name":"People Gamut","domain":"peoplegamut.com","url":"https://alion.io/company/people-gamut","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"JavaScript","optional":false},{"name":"Maven","optional":false},{"name":"npm","optional":false},{"name":"Python","optional":false},{"name":"TypeScript","optional":false},{"name":"CVE","optional":true},{"name":"Java","optional":true},{"name":"SLSA","optional":true},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-09-11T07:36:46Z","employer_posted_date":null,"last_verified_at":"2026-09-11T07:36:46Z","board_verified":false,"closed_at":null,"days_open":50,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":50},"description":"What you'll do :\n\n- The primary tasks of this position relate to the detection, triage, and analysis of malicious open source software components - identifying threats across public package ecosystems (npm, PyPI, Maven, etc.) and assessing their scope, intent, and impact.\n\n- Day-to-day work includes triaging and assessing incoming malware alerts, reviewing Indicators of Compromise (IoCs), and maintaining threat campaign records to track attacker infrastructure, tactics, and patterns over time.\n\n- A core responsibility is the in-depth technical analysis of suspicious packages: reverse-engineering obfuscated code, identifying malicious behaviors (exfiltration, backdoors, dependency confusion, typosquatting, etc.), and producing detailed internal assessments.\n\n- You will author and publish external-facing content - blog posts, technical write-ups, and security advisories - communicating findings clearly to both technical and non-technical audiences, and contributing to the broader security community's awareness of emerging threats.\n\n- You will collaborate with internal teams to feed findings into detection pipelines, enrich our vulnerability and threat database, and help improve automated detection coverage over time.\n\nWhat we're looking for :\n\n- Bachelor's degree in engineering or a related field, with at least 3 years of hands-on professional experience specifically in malware analysis, threat intelligence, or open source package security.\n\n- Demonstrated experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team.\n\n- Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures) and maintaining threat campaign tracking.\n\n- Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go) - including obfuscated or minified code.\n\n- Experience producing external security communications: blog posts, advisories, or technical reports intended for a public or customer-facing audience.\n\n- Understanding of package manager ecosystems and common attack patterns (typosquatting, dependency confusion, malicious install scripts, etc.).\n\nNice to have : \n\n- Experience contributing to or operating threat intelligence platforms or malware databases.\n\n- Familiarity with static and dynamic analysis tooling (sandboxes, YARA rules, SAST tools).\n\n- Understanding of software supply chain security standards and frameworks (SLSA, SSDF, etc.).\n\n- Prior public research, CVE credits, or published malware findings.\n\n- Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent.\n\nWe :\n\n- Strive for excellence in everything we do, prioritizing quality, speed, and impactful outcomes.\n\n- Engage in first principles thinking to debate ideas, test assumptions, and make decisions.\n\n- Put data above opinions, seeking truth and clarity in all our endeavors.\n\n- Embrace a culture of feedback and continuous improvement, assuming good intent in all interactions.\n\n- Celebrate wins as a team, understanding that our collective success is intertwined with the success of our customers.\n\nSkills\nPython, Java, Cyber Security, Malware, Information Security, Reverse Engineering Tools, Malware Forensics, Threat Detection, R&D, R&D - Security","description_format":"text","description_chars":3305,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-25T18:04:06Z"}],"visa":[],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.528,"p_room":0.35,"age_days":49,"expected_fill_days":24,"reasons":["seen:49","win:tail"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/people-gamut-security-researcher","json_url":"https://alion.io/job/people-gamut-security-researcher.json","meta":{"generated_at":"2026-10-31T21:24:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33494,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806610},"rest":"https://alion.io/mcp/rest/get_company?id=3806610"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpeople-gamut-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpeople-gamut-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpeople-gamut-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/people-gamut-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpeople-gamut-security-researcher"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1253027}},{"tool":"search_jobs","arguments":{"company":"peoplegamut.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1253027},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}