Job Title : Cyber Security Research Engineer Location : HyderabadEC-Councilis the world’s largest cyber security technical certification body. We operate in 145 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.Role Overview: We are looking for cyber security researchers who are passionate about building hands-on cyber security labs and CTFs and learning how modern attacks work. The role focuses on researching real-world attacks, building vulnerable systems and creating reliable cyber-range scenarios for practical learning.Responsibilities: Research extensively on the latest hacking, pen testing and computer forensic trends in the industry, expanding focus to include AI/ML vulnerabilities. Build simulated environments (CTFs) using latest vulnerabilities and attack vectors, explicitly mapping scenarios to MITRE (ATT&CK and ATLAS) frameworks and OWASP Top 10 (Web, LLM, ML, and AI Agent) standards. Recreate the vulnerabilities for educational purpose, ensuring reliable and repeatable lab environments. Deliver well-documented, functional, and well-tested pentest and forensic scenarios in the form of deployable machines. Create red team and blue team exercises, utilizing standard offensive tooling as well as blue team frameworks.Desired Profile: Education:Graduate or Postgraduate in Information Technology, Computer Science, Cyber Security or a related discipline. Experience:0–4 years of experience or hands-on exposure in cyber security, research, CTF development, penetration testing, or SOC operations. Core Skills:Strong interest in both offensive and defensive cyber security techniques. Comfortable working with Linux and Windows operating systems. Tooling:Hands-on exposure to common security tools such as Burp Suite, Metasploit, Nmap, Wireshark, BloodHound, and Sysinternals, as well as AI red teaming frameworks (e.g., garak, PyRIT, ART). Networking & AppSec:Basic understanding of networking concepts such as TCP/IP, ports, routing and firewalls. Familiarity with web and application security fundamentals, exploitation workflows, and privilege-escalation concepts.Standout Qualifications (Added Advantages): Practical experience in digital forensics or building incident response workflows. Exposure to cloud security labs, OT/industrial protocols, or building AI and machine-learning security labs. Experience building practice labs or vulnerable machines, or participation in CTFs and hackathons. Public technical write-ups, blogs or GitHub projects.Additional Information: EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate. EC-Council is dedicated to working with and providing reasonable accommodation to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at @ and let us know how we can assist.To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein.Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained. Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations. Please review our policy here:EC-Council Privacy Policy – User and Company | EC-Council. Submission of your application will be considered as your acceptance of the terms stated above
Job Title
Cyber Security Research Engineer