Senior Manager, Cyber Threat Intelligence

AIA Digital+; Kuala Lumpur; Sur place; MYR 120 000 - 210 000; Plein temps

Résumé du poste

AIA Digital+ in Malaysia is seeking an experienced Cyber Threat Hunter to develop and maintain a robust threat hunting framework. You will hunt for threat actor groups, techniques, and TTPs, analyze anomalous logs, and translate findings into repeatable processes.

The role requires 5+ years in security, relevant certifications, and strong English communication. You will produce intelligence reports for executives and continuously improve monitoring and alerting capabilities.

Qualifications

• Minimum 5 years in a technical security role (Threat Intelligence, Hunting or Purple Teaming).
• Certifications: GCTI, CCIP, CIA.
• Experience with MITRE ATT&CK, Cyber Kill Chain or Diamond Model.
• Proficient with threat intelligence platforms and OSINT tools.
• Knowledge of malware behavior and network protocols.
• Experience with incident response, log analysis and malware triage.
• Strong understanding of enterprise controls and vulnerabilities.
• Develop detection signatures (YARA, SNORT).

Responsabilités

• Develop, document, and maintain cyber threat hunting framework.
• Hunt threat actors and TTPs using MITRE ATT&CK, Kill Chain, and Diamond Model.
• Analyze logs to detect and mitigate threats, and automate hunting workflows.
• Provide forensic analysis of network captures, DNS, proxies, malware, logs, and security data.
• Produce Threat Advisories and Intelligence Reports for Senior Management.
• Keep up to date with threat landscape and inform alerts.

Connaissances

Threat hunting

Cyber Threat Intelligence

Purple Teaming

MITRE ATT&CK

Cyber Kill Chain

Diamond Model

OSINT tools

Malware analysis

Incident response

Threat reports

Formation

GCTI

CCIP

CIA

Outils

Threat intelligence platforms

SNORT

YARA

Network analysis tools

Description du poste

• Develop, document, and maintain cyber threat hunting framework.
• Hunt and identify for threat actor groups, techniques, tools and procedures (TTPs)
• Perform threat hunting through analysis of anomalous log data to detect and mitigate cyber threat activities.
• Actively develop threat hunting hypothesis, translating hunt activities into an iterative process, and automating the process of hunting for cyber threats. This includes building Agentic AI capabilities as part of automation.
• Review alerts generated by security monitoring tools and provided recommendations to enhance alerts for more efficient monitoring.
• Provide forensic analysis of network packet captures, DNS, proxies, malware, host-based security, and application logs, as well as logs from various data sources.
• Provide expert investigative support during large scale and complex security incidents.
• Analysis of security incidents to enhance security monitoring and alert catalogue.
• Investigate and validate suspicious events by using open-source and proprietary intelligence sources.
• Document and communicate findings to an array of audiences which includes both technical and executive teams.
• Continuously improving processes and use cases on security monitoring tools.
• Keep up to date with information security news, adversary techniques and threat landscape.
• Support day-to-day operations, ensuring efficient delivery of Cyber Threat Intel services.

Requirements

• Must have a minimum of 5 years of experience in a technical security role in one of the following areas: Cyber Threat Intelligence, Cyber Threat Hunting, Purple Teaming.
• Acquired relevant certifications: GCTI, CCIP, CIA.
• Experience with researching and incorporating Cyber Threat Intelligence findings into threat hunting workflow.
• Knowledge and experience working with MITRE ATTACK framework, Cyber Kill Chain Model or Diamond Model.
• Proficiency in using threat intelligence platforms and OSINT tools.
• Knowledge of malware and threat actor’s behavior, and how common protocol and applications work at network level.
• Experience with incident response process, including detecting advanced adversaries, log analysis and malware triage.
• Good understanding in network protocols and system vulnerabilities.
• Knowledge and experience in developing detection signatures (YARA, SNORT)
• Highly capable in producing Threat Advisories and Intelligence Reports for Senior Management in a timely manner.

Communication Requirements

• Excellent verbal and written communication skills, fluent in English.
• Strong interpersonal skills.
• Self-learner with demonstrated ability of understanding and keeping up to date with latest technology.
• Attention to detail and ability to report on key activities and status Analytical capabilities.
• Knowledge of analysis of competing hypothesis (ACH), logical fallacies and cognitive biases to provide solutions to a problem is a plus.
• Familiarity with enterprise controls, related tools and their limitations.
• A team player, with ability to work independently in certain situations.