Sr Associate Threat Intelligence

National Payments Corporation of India (NPCI); Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

National Payments Corporation of India (NPCI) in Telangana is seeking a Threat Intelligence Analyst with 3-5 years of CTI, threat hunting, and security operations to identify and report cyber threats and campaigns. You will partner with SOC, IR, vulnerability management, and engineering to convert insights into stronger defenses.

The role requires hands-on experience with threat intel platforms and MITRE ATT&CK mapping, plus OSINT techniques and proactive threat hunting across multiple

Qualifications

• 3-5 years of CTI experience and security operations
• Proficiency with SIEM tools (Microsoft Sentinel, Splunk, QRadar, ArcSight)
• Hands-on with cloud security monitoring and Defender XDR
• Experience with MITRE ATT&CK, Cyber Kill Chain, NIST framework
• OSINT investigations and threat intelligence platforms
• Familiarity with malware analysis and log correlation
• Experience with STIX/TAXII and IOC management
• Programming/scripting knowledge in Python or PowerShell

Responsibilities

• Monitor, research, and analyze cyber threats, threat actors, and campaigns
• Collect and evaluate intelligence from OSINT, feeds, and dark web monitoring
• Conduct proactive threat hunting across endpoints, networks, and cloud environments
• Identify IOCs/IOAs and map adversary behavior with MITRE ATT&CK
• Produce intelligence reports, advisories, and situational awareness briefings
• Support IR investigations with threat context and remediation guidance
• Develop detection use cases, Sigma rules, and correlation rules
• Collaborate with SOC, engineering, and business stakeholders

Skills

Threat intelligence lifecycle

SIEM proficiency

MITRE ATT&CK

OSINT investigations

Threat hunting

threat intel platforms

Python

PowerShell

Tools

MISP

ThreatConnect

Recorded Future

Anomali

Job description

Job Summary

We are seeking a highly motivated and analytical Threat Intelligence Analyst with 3-5 years of experience in Cyber Threat Intelligence (CTI), Threat Hunting, and Security Operations. The ideal candidate will be responsible for identifying, analyzing, and reporting emerging cyber threats, threat actors, attack techniques, vulnerabilities, and campaigns that could impact the organization. This role requires close collaboration with Security Operations Center (SOC), Incident Response, Vulnerability Management, and Engineering teams to transform threat intelligence into actionable insights that strengthen the organizations security posture. The successful candidate should possess hands-on experience with threat intelligence platforms, SIEM technologies, threat hunting methodologies, MITRE ATTCK framework, and open-source intelligence (OSINT) techniques. The role demands strong analytical skills, technical expertise, and the ability to communicate complex cybersecurity threats to both technical and non-technical stakeholders.

Key Responsibilities

• Monitor, research, and analyze cyber threats, threat actors, malware campaigns, and emerging attack trends affecting the organization.
• Collect, correlate, and evaluate intelligence from multiple sources including OSINT, commercial intelligence feeds, dark web monitoring platforms, and internal security telemetry.
• Conduct proactive threat hunting activities across endpoints, networks, cloud environments, and security platforms.
• Identify and validate Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and Tactics, Techniques, and Procedures (TTPs).
• Leverage the MITRE ATTCK framework to map adversary behaviors and improve detection capabilities. Produce actionable intelligence reports, executive summaries, threat advisories, and situational awareness briefings.
• Support incident response investigations by providing threat intelligence context, attack attribution, and remediation recommendations.
• Analyze malware samples and threat actor methodologies to understand attack patterns and potential business impact.
• Develop and maintain detection use cases, threat hunting queries, Sigma rules, and correlation rules. Monitor dark web forums, underground marketplaces, and external threat sources for risks targeting organizational assets.
• Collaborate with SOC analysts, security engineers, vulnerability management teams, and business stakeholders to improve cyber defense strategies.
• Utilize threat intelligence platforms such as MISP, ThreatConnect, Recorded Future, Anomali, or similar technologies for intelligence management and enrichment.
• Stay current with cybersecurity trends, threat landscapes, vulnerabilities, and industry best practices.

Required Skills and Qualifications

• Strong understanding of cyber threat intelligence lifecycle and intelligence-driven security operations.
• Experience with SIEM solutions such as Microsoft Sentinel, Splunk, QRadar, or ArcSight.
• Proficiency in Microsoft Defender XDR, Defender for Endpoint, and cloud security monitoring tools.
• Knowledge of MITRE ATTCK, Cyber Kill Chain, Diamond Model, and NIST Cybersecurity Framework.
• Hands-on experience with OSINT investigations and threat intelligence platforms.
• Familiarity with malware analysis concepts, network traffic analysis, endpoint investigations, and log correlation.
• Experience with STIX/TAXII, IOC management, and threat intelligence sharing mechanisms.
• Working knowledge of Python, PowerShell, KQL, YARA, or Sigma rules.

Job Type

Full Time

Location

Telangana