THREAT INTELLIGENCE ANALYST

DUTIES and RESPONSIBILITIES:

Research & Analysis

• Conduct in-depth research on cyber threat events, using OSINT sources and the Recorded Future Intelligence Cloud.
• Identify and assess trending cyberattacks, including ransomware, phishing, software vulnerability exploitation, and other emerging threats.
• Map identified threats to frameworks such as MITRE ATT&CK and the diamond model of intrusion analysis.

Reporting & Writing

• Produce analyst notes referencing both open-source and internal intelligence, adhering to a clear, technical writing style.
• Ensure reports are concise, informative, and appropriately tailored for defenders, technical teams, and non-technical stakeholders.
• Publish analyst notes to the Recorded Future Intelligence Cloud, including all relevant entities (e.g., threat actors, malware, TTPs, MITRE IDs).

Collaboration & Communication

• Work closely with global Threat Intelligence Analyst teams (Philippines, Australia, UK, US) to refine and validate findings.
• Engage in team meetings to share updates, discuss guidance changes, and participate in ongoing training.
• Provide ad-hoc support or additional coverage as needed by the business.

Process & Best Practices

• Accurately document and interpret raw data, mapping it to recognized threat intelligence frameworks.
• Maintain up-to-date knowledge of the cyber threat landscape and emerging trends.
• Contribute to process improvements and share learnings/best practices within the team.

REQUIREMENTS:

• At least one (1) year of professional experience in cybersecurity, cyber threat intelligence, or a closely related field, OR least two (2) years of professional experience in technical writing, due diligence, risk assessments, physical threat intelligence, fraud intelligence, or any role requiring substantial report writing.
• Solid understanding of basic cyber threats (e.g., malware, phishing, trojans, botnets).
• Familiarity with OSINT research techniques and sources.
• Ability to accurately interpret raw data and translate it into clear, coherent reports.
• Excellent English-language grammar and reading comprehension.
• Strong verbal communication skills in English.
• Demonstrable ability to produce structured, concise, and accurate written analysis tailored to different audiences.
• Preferred: Working proficiency (reading and writing) in Spanish or Portuguese
• Strong attention to detail and accuracy.
• Curiosity-driven approach to research and problem-solving.
• Ability to thrive in a collaborative, fast-paced environment.
• Strong organizational skills to handle multiple projects and deadlines.

NICE-TO-HAVE QUALIFICATIONS:

• Prior hands-on experience with threat intelligence platforms or feeds.
• Familiarity with applying frameworks such as MITRE ATT&CK, the diamond model, CVE

standards, and/or the cyber kill chain.

• Up-to-date awareness of current trends and ongoing developments in cybersecurity and the broader threat landscape.
• Ability to propose actionable mitigations or defensive strategies based on threat

intelligence findings.

• Special interest and demonstrated understanding of cybersecurity issues throughout Latin America
• In-depth knowledge of popular news sources, including technical publications, throughout Latin America.
• Relevant cybersecurity or threat intelligence certifications (e.g., Security+, CySA+, GCTI,

GCIA, CISSP, etc.)

Work Address: MOA, Pasay

Work Set-up: Hybrid (2-4x a month onsite)

Work Schedule: Night Shift

Work Type: Full time

BENEFITS OFFERED:

• VL/SL credits
• Certified Great Place to Work
• Hybrid Work Set-up
• Equipment is provided (Laptop/Desktop)
• HMO coverage (2 dependents)
• Work-life Balance
• Telecommunication Allowance for Team Leaders and Up
• Competitive Salary Package
• Performance-based Bonuses (Quarterly)

Job Type: Full-time

Pay: From Php45,000.00 per month

Application Question(s):

• Years of experience in Technical Writing?
• Years of experience in Threat Analysis?
• Years of experience in Threat Landscape?
• Years of experience in risk assessment and proofreading in addition to the familiarity in threat intelligence?
• Years of experience in MITRE ATT&CK framework?
• Years of experience in JIRA?

Education:

• Bachelor's (Required)

Experience:

• cyber threat intelligence: 1 year (Required)
• technical writing, due diligence, risk assessments: 2 years (Required)

Work Location: In person