Threat Intel Analyst, L1

This is a fully remote position, open to applicants in Malaysia.

📋 Description

• Oversee various threat intelligence sources, including open-source intelligence, dark web resources, social media, data leak sites, threat feeds, and indicators of external attack surfaces.

• Perform intelligence monitoring for senior executives and other high-risk individuals.

• Detect impersonation, credential exposure, doxing, reputational threats, targeted phishing, and indicators of physical-digital risks.

• Gather, validate, and enhance indicators of compromise, threat actor activities, vulnerabilities, campaigns, and new tactics, techniques, and procedures.

• Develop intelligence reports, alerts, watchlists, and situational updates.

• Escalate credible threats, exposed credentials, impersonation attempts, brand abuse, and findings related to VIPs according to established playbooks and severity guidelines.

• Assist in cyber threat investigations by correlating external intelligence with internal security telemetry, cases, alerts, and incident response efforts.

• Keep precise records of intelligence collection, validation, analysis results, escalations, and communications with stakeholders.

• Stay informed about cyber threats impacting Malaysia, Southeast Asia, multinational organizations, senior executives, and pertinent business sectors.

• Collaborate with global security operations, incident response teams, executive protection, and business stakeholders.

⛳️ Requirements

• A Bachelor’s degree or completed studies in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, International Relations, Criminology, or a related field.

• A minimum of 2 years' experience in cybersecurity, threat intelligence, security operations, fraud monitoring, open-source intelligence, investigations, or a similar analytical role.

• Fundamental understanding of cyber threats, threat actors, phishing, malware, credential exposure, impersonation, data leakage, and social engineering techniques.

• Familiarity with OSINT techniques, threat intelligence platforms, SIEM tools, dark web monitoring, social media monitoring, or concepts related to external attack surface monitoring.

• Ability to evaluate information credibility, recognize patterns, document findings clearly, and convert intelligence into actionable recommendations or escalation notes.

• Excellent written and verbal proficiency in English.

• Preferred professional certifications include CompTIA Security+, Network+, CEH, CySA+, GIAC Cyber Threat Intelligence, Microsoft security fundamentals, or equivalent entry-level cybersecurity or intelligence credentials.

• Experience in supporting threat intelligence, SOC, fraud monitoring, brand protection, executive protection, investigations, or managed security service environments is preferred.

• Familiarity with threat intelligence platforms, OSINT tools, dark web monitoring tools, social media intelligence platforms, phishing investigation tools, or digital risk protection platforms is preferred.

• Understanding of VIP monitoring use cases is preferred.

• Knowledge of the MITRE ATT&CK framework, cyber kill chain, threat actor profiling, indicator enrichment, and intelligence lifecycle concepts is preferred.

• Familiarity with compliance-focused environments and documented analysis, adherence to controls, data handling discipline, and audit support is preferred.

🏝️ Benefits

• Competitive salary package.

• Performance-based bonuses.

• Flexible working options.

• Remote and hybrid working models.

• Comprehensive health insurance.

• Wellness initiatives.

• Resources for physical and mental well-being.

• Training programs.

• Mentorship opportunities.

• Career development paths.

• Supportive, inclusive, and growth-focused environment.

• Team-building activities.

• Social events.

• Medical insurance.

• Structured learning, development, and career growth opportunities.

• A diverse, inclusive, and team-oriented culture.