Threat Intelligence Analyst

Lintasarta; Jakarta Pusat; On-site; IDR 480,000,000 - 720,000,000; Full time

Job summary

Lintasarta is hiring a Cyber Threat Intelligence (CTI) Analyst to shift our defenses from reactive to predictive within the SOC. You will track threat actors, monitor OSINT and dark web sources, and translate data into actionable intelligence.

You will work with Threat Hunters to feed IoCs/IoBs into SIEMs and SOAR playbooks, publish weekly threat briefings, and help prioritize patches against active campaigns and CVEs. Strong analytical and technical skills are essential.

Qualifications

• Total Experience: Minimum of 4–6+ years in cybersecurity.
• At least 2–3 years focused on cyber threat intelligence or cybercrime investigation.
• History of authoring threat intelligence reports or advisories.
• Expert-level capability with MITRE ATT&CK, Cyber Kill Chain, Diamond Model.

Responsibilities

• Intelligence Collection & Analysis: OSINT, forums, threat feeds, and dark web to identify exploits and campaigns.
• Track APTs and cybercriminals; document TTPs.
• Analyze geopolitical and industry trends to predict threat shifts.
• Translate threat data into IoCs and IoBs for SOC use.

Skills

Threat intelligence

MITRE ATTACK

Cyber Kill Chain

Diamond Model

MISP

ThreatConnect

Anomali ThreatStream

Recorded Future

VirusTotal

Shodan

Censys

DomainTools

Python

SQL

GCTI

CTIA

CISSP

GCIH

Tools

MISP

Anomali ThreatStream

Recorded Future

ThreatConnect

VirusTotal

Shodan

Censys

DomainTools

Job description

n We are Hiring: Cyber Threat Intelligence (CTI) AnalystAre you ready to shift our defenses from reactive to predictive? We are looking for a highly strategic and analytical Cyber Threat Intelligence (CTI) Analyst to join our advanced SOC team!

In this role, you won't just wait for internal alerts. Instead, you will track external threat actors, monitor the dark web, analyze emerging exploit trends, and dissect global campaigns. Your mission will be to translate complex threat data into highly actionable intelligence, ensuring our SOC knows exactly who is targeting us, what methods they are using, and how to defend against them before an attack occurs.

Key Responsibilities

• Intelligence Collection & AnalysisMonitor open-source intelligence (OSINT), closed hacker forums, commercial threat feeds, and dark web marketplaces to identify emerging exploits and active campaigns.
• Track and profile Advanced Persistent Threats (APTs) and cybercriminal syndicates, documenting their specific Tactics, Techniques, and Procedures (TTPs).
• Analyze global geopolitical events and industry-specific trends to predict upcoming shifts in the threat landscape targeting our regional footprint.
• Operationalization & Detection SupportTranslate raw threat data into highly actionable Indicators of Compromise (IoCs) and Indicators of Behavior (IoBs).
• Partner with Threat Hunters and Detection Engineers to inject threat intelligence directly into SIEM watchlists, firewall blocks, and automated SOAR playbooks.
• Author and issue timely tactical alerts, weekly threat briefings, and executive-level threat intelligence reports detailing immediate digital risks.
• Vulnerability & Brand ProtectionEvaluate newly disclosed vulnerabilities (CVEs) against our actual technology stack, guiding patching priorities based on real-world exploitation.
• Track credential leaks, data dumps, and lookalike domain registrations to mitigate typosquatting, phishing infrastructure, and brand impersonation.

Job Requirements & Qualifications

• Experience & Track Record:Total Experience: Minimum of 4–6+ years of technical experience in cybersecurity.
• CTI Focus: At least 2–3 years focused strictly on cyber threat intelligence or cybercrime investigation.
• Analytical Portfolio: A demonstrated history of authoring comprehensive threat intelligence reports, whitepapers, or tactical advisories.
• Technical Skills & Tools:Framework Mastery: Expert-level capability utilizing the MITRE ATT&CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.
• TIP Platforms: Hands-on experience administering and pivoting data within Threat Intelligence Platforms such as MISP, Anomali ThreatStream, Recorded Future, or ThreatConnect.
• Investigative Pivoting: Advanced skills utilizing infrastructure lookup tools like VirusTotal, Shodan, Censys, DomainTools, and passive DNS repositories to map adversary C2 networks.
• Log & Script Literacy: Basic proficiency with Python or SQL to parse unstructured intelligence feeds, scrape open-source repositories, and interact with threat-feed APIs.
• Preferred Professional Certifications (Highly Prioritized):Dedicated Threat Intelligence: GCTI or CTIA.
• Advanced Architecture & Response: CISSP or GCIH.

Ready to outsmart the adversaries?

#Hiring #CyberSecurityJobs #ThreatIntelligence #CTI #SOC #OSINT #InfoSec #TechCareersn