Threat Intelligence Intern

Ethicalhat; India; On-site; INR 134,000 - 201,000; Full time

Job summary

Ethicalhat invites an enthusiastic Threat Intelligence Intern to join its cybersecurity team. You will assist in research, analysis and documentation of threats, indicators of compromise, and threat actors under experienced mentors.

You will gain hands-on exposure to CTI processes, OSINT methods and MITRE ATT&CK mapping while contributing to threat intel reports and alerts for client and internal security operations.

Qualifications

• Graduate/final-year student in Cybersecurity, Computer Science, Information Technology or related discipline.
• Basic understanding of cybersecurity fundamentals, networking and common cyber threats.
• Familiarity with IOC, TTPs, malware, phishing, vulnerabilities and threat actors.
• Basic understanding of MITRE ATT&CK and the cyber threat intelligence lifecycle.
• Interest in OSINT and cyber threat research.
• Basic knowledge of Windows/Linux and networking concepts such as DNS, HTTP/S, IP addresses and ports.
• Good analytical and research skills with attention to detail.
• Ability to document technical findings clearly and communicate them to the security team.

Responsibilities

• Monitor trusted intelligence sources for emerging cyber threats, vulnerabilities, campaigns and threat actor activity.
• Assist in collecting, validating and analysing IOCS such as malicious IP addresses, domains, URLs and file hashes.
• Conduct OSINT research using approved sources and tools.
• Assist in analysing phishing campaigns, malware activity, attacker infrastructure and TTPs.
• Map relevant threat activity and TTPs to the MITRE ATT&CK framework under guidance.
• Support the preparation of threat intelligence alerts, advisories, summaries and reports.
• Assist SOC and security teams with contextual threat information during investigations where required.
• Maintain threat intelligence records and document research findings clearly and accurately.

Skills

Cybersecurity fundamentals

IOC analysis

OSINT research

MITRE ATT&CK familiarity

Threat research

Documentation

Education

Bachelor's degree or final-year student in Cybersecurity, Computer Science, Information Technology

Tools

Threat intelligence platforms

VirusTotal

MISP

Job description

The Threat Intelligence Intern will support the cybersecurity team in researching, analysing and documenting cyber threats, threat actors, vulnerabilities and indicators of compromise. The role will provide hands-on exposure to Cyber Threat Intelligence (CTI) processes and their application within security operations.

Working under the guidance of experienced security professionals, the intern will assist with threat research, intelligence collection, IOC analysis and preparation of threat intelligence reports relevant to client and organisational environments.

Key Responsibilities

• Monitor trusted intelligence sources for emerging cyber threats, vulnerabilities, campaigns and threat actor activity.
• Assist in collecting, validating and analysing Indicators of Compromise (IOCs) such as malicious IP addresses, domains, URLs and file hashes.
• Conduct open-source intelligence (OSINT) research using approved sources and tools.
• Assist in analysing phishing campaigns, malware activity, attacker infrastructure and common tactics, techniques and procedures (TTPs).
• Map relevant threat activity and TTPs to the MITRE ATT&CK framework under guidance.
• Support the preparation of threat intelligence alerts, advisories, summaries and reports.
• Assist SOC and security teams with contextual threat information during investigations where required.
• Maintain threat intelligence records and document research findings clearly and accurately.

Skills & Experience

• Graduate/final-year student in Cybersecurity, Computer Science, Information Technology or a related discipline.
• Basic understanding of cybersecurity fundamentals, networking and common cyber threats.
• Familiarity with concepts such as IOCs, TTPs, malware, phishing, vulnerabilities and threat actors.
• Basic understanding of MITRE ATT&CK and the cyber threat intelligence lifecycle.
• Interest in OSINT and cyber threat research.
• Basic knowledge of Windows/Linux and networking concepts such as DNS, HTTP/S, IP addresses and ports.
• Good analytical and research skills with attention to detail.
• Ability to document technical findings clearly and communicate them to the security team.

Preferred Qualifications

Academic projects, labs, CTF participation or training related to threat intelligence, SOC, malware analysis or incident response will be an advantage. Familiarity with threat intelligence platforms, VirusTotal, MISP or similar security tools is preferred but not mandatory.