Senior Associate - Cyber Threat Intelligence Analyst

PwC Malaysia; Kuala Lumpur; On-site; MYR 90,000 - 130,000; Full time

Job summary

PwC Malaysia is seeking a Senior Associate for Assurance with a focus on cyber threat intelligence within risk architecture. You will monitor threat trends, analyze threat actors, and produce intelligence reports to support security incidents and client briefings.

This role involves 24x7 SOC operations exposure, OSINT sources, and collaboration with incident response teams. A bachelor’s or diploma in IT/CS and relevant security certifications are required.

Qualifications

• Bachelor's Degree / Diploma in Information Technology, Information Security, Computer Science or a similar field.
• Minimum 2-3 years of relevant experience working in 24x7 Security Operations Centre (SOC) environment.
• Solid understanding of MITRE ATT&CK, GIAC Cyber Threat Intelligence (GCTI), CREST Certified Threat Intelligence Manager (CCTIM) and CRTIA.

Responsibilities

• Proactively monitor and communicate cyber threat trends, vulnerabilities, IOCs, and TTPs.
• Monitor external data sources and gather cyber threat intelligence for priority threats.
• Familiarity with deep/dark web and OSINT sources.
• Develop intelligence reports on cyber events, threats, and geopolitical developments.
• Analyze cyber-threat actors and report on prioritized TTPs and malware analyses.
• Disseminate tactical, operational, and strategic threat intelligence products.
• Provide threat intel support for security incidents and RFIs, contributing to threat assessments.
• Support deliverables such as Security/Incident Alerts and Client briefings.

Skills

Threat intelligence

SOC operations

OSINT

Threat reporting

Incident support

Education

Bachelor's degree / Diploma in IT or CS

Job description

Line of Service

Assurance

Industry/Sector

Not Applicable

Specialism

Risk Architecture

Management Level

Senior Associate

Key Responsibilities

• Proactively monitor and communicate cyber threat trends, vulnerabilities, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs).
• Monitor external data sources and leverage resources to gather cyber threat and setup cyber threat intelligence infrastructure and payloads associated with priority threats.
• Familiarity with deep and dark web, covert communication channels, social media platforms, and other OSINT sources.
• Develop and produce intelligence reports focused on cyber events and trends, industry-level analysis of developing cybersecurity threats, and geopolitical events.
• Analyze cyber-threat actors, groups, and events to report on prioritized TTPs, behaviors, motivations, malware analysis, etc.
• Disseminate finished tactical, operational, and strategic threat intelligence products (reports, briefings, etc.).
• Provide threat intelligence support for security incidents and respond to requests for information (RFIs) and participate in the drafting and production of company threat assessments.
• Support creation of deliverables including but not limited to Security/Incident Alerts, Intelligence Reports, Trend and summary reports, Client briefings

Job Description & Summary

• Proactively monitor and communicate cyber threat trends, vulnerabilities, indicators of compromise (IOCs), and tactics, techniques, and procedures (TTPs).
• Monitor external data sources and leverage resources to gather cyber threat and setup cyber threat intelligence infrastructure and payloads associated with priority threats.
• Familiarity with deep and dark web, covert communication channels, social media platforms, and other OSINT sources.
• Develop and produce intelligence reports focused on cyber events and trends, industry-level analysis of developing cybersecurity threats, and geopolitical events.
• Analyze cyber-threat actors, groups, and events to report on prioritized TTPs, behaviors, motivations, malware analysis, etc.
• Disseminate finished tactical, operational, and strategic threat intelligence products (reports, briefings, etc.).
• Provide threat intelligence support for security incidents and respond to requests for information (RFIs) and participate in the drafting and production of company threat assessments.
• Support creation of deliverables including but not limited to Security/Incident Alerts, Intelligence Reports, Trend and summary reports, Client briefings

Experience And Qualifications

• Bachelor's Degree / Diploma in Information Technology, Information Security, Computer Science or a similar field.
• Minimum 2-3 years of relevant experience working in 24x7 Security Operations Centre (SOC) environment
• Solid understanding of MITRE ATT&CK, Acquired or ability to acquire the following certification:
• GIAC Cyber Threat Intelligence (GCTI)
• CREST Certified Threat Intelligence Manager (CCTIM)
• CREST Registered Threat Intelligence Analyst (CRTIA)

Additional Notes

• This is a 12-month contract with the opportunity to be extended based on project and performance.
• Contract staff will be getting the standard benefit as permanent staff.

Education

(if blank, degree and/or field of study not specified)

Degrees/Field Of Study Required

Degrees/Field of Study preferred:

Certifications

(if blank, certifications not specified)

Optional Skills

• Accepting Feedback, Accepting Feedback, Active Listening, AI Fluency, AI-Human Collaboration, Analytical Thinking, Auditing, Auditing Standards, Audit Internal Controls, Audit Preparation, Audit Reporting, Audit Risk Assessments, Audit Support, Business Process Improvement, Communication, Compliance and Standards, Compliance Assurance, Compliance Auditing, Compliance Risk Assessment, Compliance Training, Creativity, Data Analysis and Interpretation, Developing Policies and Guidelines, Digital Tooling, Embracing Change {+ 29 more}

Travel Requirements

Up to 40%

Available for Work Visa Sponsorship?

No

Government Clearance Required?

Yes