Threat Intelligence Analyst

Deepwatch; Bengaluru; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Deepwatch in Bengaluru, India seeks a Threat Intelligence Analyst to research and analyze threat methodologies, adversaries, and TTPs, delivering timely intelligence to customers and stakeholders. The role requires independent thinking and strong writing to communicate complex security issues to senior leadership.

You will monitor evolving cyber threats, develop new approaches to threat research, and collaborate with global teams to ensure continuous coverage and rapid client outcomes.

Qualifications

• Experience in cyber threat intelligence, security research, SOC operations, or cyber investigations.
• Degree in CS/IT/Intelligence or equivalent practical experience.
• Strong analytical, investigative and written/verbal communication skills.

Responsibilities

• Research evolving threat landscapes, tactics, techniques, and threats.
• Identify, track, and analyze emerging cyber threats.
• Develop and deliver time-sensitive threat intelligence reports for significant events.
• Collaborate with global teams to ensure continuous threat intel coverage.

Skills

Threat intelligence

Security research

SOC operations

Cyber investigations

Analytical skills

Communication

Professionalism

Industry context

Technical familiarity

Education

CS/IT/Intelligence degree

Tools

OSINT tools

CTI tools

SIEM

XSOAR

Threat Intel Platform

Job description

Reporting to the Senior Manager, Cybersecurity Operations, the Threat Intelligence Analyst will focus on understanding and conducting in-depth analysis on threat methodologies, adversarial capabilities, and Tactics Techniques and Procedures (TTPs). This role is responsible for leveraging threat intelligence to provide timely and actionable intelligence to Deepwatch customers and stakeholders. The Threat Intelligence Analyst should be an independent, critical thinker skilled in the intelligence process and able to satisfy intelligence requirements under time-sensitive deadlines. This position requires the analysis of artifacts and methodologies of threat actors to determine the impact and severity to the environment.

On a daily basis, you will be researching the changing cybersecurity landscape, including new tactics, techniques, and threats. You will have the opportunity to identify and develop new ways of tackling problems and identifying solutions to meet the needs of Deepwatch customers. The cyber threat landscape is ever evolving and you can be at the forefront of understanding what s on the horizon.

In this role, you'll get to:

• Support and maintain active monitoring of external intelligence sources.
• Identify, track, and analyze emerging or ongoing cyber threats.
• Escalate significant findings to senior leadership or lead threat intelligence staff for validation and dissemination.
• Conduct indicator management and assist in broader threat research initiatives.
• Develop and deliver periodic, time-sensitive threat intelligence reports for Significant Cybersecurity Events.
• Provide surge support for other Advisory Tactics and Intelligence (ATI) technical programs.
• Collaborate with global teams across time zones to ensure continuous threat intelligence coverage and successful client outcomes.
• Partner with US-based leadership to align regional intelligence efforts with global operational strategies.

To be successful in this role, you'll need to:

• Experience: 1 3+ years of experience in cyber threat intelligence, security research, SOC operations, or cyber investigations.
• Education: A Degree in Computer Science, IT, Intelligence, or equivalent practical experience.
• Core Cyber Expertise: Proven experience in one or more core domains: Cybersecurity Operations, Threat Intelligence threat actor research, Malware reverse engineering, Threat Hunting, Incident Response, Digital Forensics, or Offensive Operations.
• Analytical Skills: Strong analytical, investigative, and critical-thinking skills with a continuous learning mindset.
• Communication: Exceptional technical writing and verbal communication skills, with the ability to discuss complex security issues with senior leadership and customers.
• Professionalism: A strong sense of ownership, discretion, and commitment to client satisfaction while working independently or across a distributed global team.
• Industry Context: Experience working in a consulting, intelligence, MDR, or managed security services (MSSP) environment.
• Technical Familiarity: Familiarity with OSINT, CTI, and investigative tools (e.g., dark web forums, marketplaces, breach data sources).

• Understanding of cybercrime ecosystems, threat actor TTPs, ransomware, fraud, or data-theft operations.
• Basic foundational knowledge of SIEM tools, Splunk, and XSOAR.
• Experience operating within a Threat Intelligence Platform (e.g., OpenCTI, MISP) to ingest, tag, and maintain IOCs throughout the indicator lifecycle.

Preferred Qualifications (A Plus):

• Relevant certifications (e.g., Security+, CEH, GCIA, GCTI, GSEC, GREM, OSCP).
• Scripting experience and a working knowledge of SQL Python.
• Experience with Cloud Security, Malware Analysis, Digital Forensics, or Incident Response (full packet capture, host/network, email).