Senior Staff Engineer Cyber Threat Intelligence (Process Developer)

Infineon Technologies AG; Penang; On-site; MYR 180,000 - 300,000; Full time

Job summary

Infineon Technologies AG in Penang, Malaysia, seeks a Senior Cyber Threat Intelligence Analyst to collect and analyze information to support detection, assessment, and mitigation of cyber threats. You will combine analytical tradecraft with structured investigations to surface proactive detection opportunities and formalize repeatable processes for the team.

You will work with SOC, Incident Response, Detection Engineering, and executives to produce actionable intelligence that informs decisions;

Qualifications

• Degree in Cybersecurity, Computer Science, or related field, or equivalent practical experience.
• 5+ years in cybersecurity with focus on threat intelligence, SOC, or incident response.
• Deep knowledge of attack methodologies and TI frameworks (MITRE ATT&CK, Cyber Kill Chain, Diamond Model, F3EAD or comparable).
• Proven investigative tradecraft: adversary infrastructure analysis and pivoting across host, network, and identity data, grounded in structured analytic techniques and source evaluation.
• Hands-on experience writing and refining investigative queries (KQL, LogScale, or comparable) against endpoint and network telemetry.
• Demonstrated experience designing investigation processes and playbooks, and establishing them as team practice.
• Hands-on understanding of Linux, networking, identity, and endpoint technologies.
• Practical experience applying LLM-based tools to analytical workloads, with a critical approach to evaluating output quality.
• Excellent technical writing and presentation skills, including executive-level communication.

Responsibilities

• Collect and analyze information to support the detection, assessment, and mitigation of cyber threats.
• Combine deep analytical tradecraft with structured investigation to surface proactive detection opportunities, and formalize investigative practice into repeatable processes and playbooks for the wider team.
• Work closely with SOC, Incident Response, Detection Engineering, and executive stakeholders to produce intelligence that informs decisions.
• Monitor, analyze, and assess cyber threats across OSINT, dark web, threat intelligence platforms, and proprietary sources, and conduct in-depth research on threat actors, TTPs, campaigns, and emerging vulnerabilities.
• Enrich intelligence with internal security telemetry, identify affected assets, and conduct investigations based on threat-actor profiling and campaign analysis.
• Pivot across host, network, and identity telemetry to investigate adversary infrastructure and activity.
• Design and document investigation playbooks and processes that translate individual expertise into repeatable, team-wide practice.
• Produce actionable reports and briefings for security teams and executives, applying structured analytic techniques and calibrated confidence.
• Translate investigative findings and intelligence requirements into detection logic recommendations, handed off to Detection Engineering for implementation.
• Contribute to and help refine investigation methodology, evidence handling, source evaluation, and intelligence quality standards.
• Apply LLM-based tools for triage, summarization, and entity extraction, with a sharp eye on output quality and limitations.
• Partner with SOC, Incident Response, Vulnerability Management, Detection Engineering, and Product Security to sharpen detection and response, and maintain relationships with industry partners, ISACs, and sharing communities.

Skills

Threat intelligence

Investigation tradecraft

Executive communication

Technical writing

Structured analytics

Education

Degree in Cybersecurity or CS

Tools

KQL

LogScale

Threat intel platforms

Linux

Endpoint telemetry tools

Job description

Responsibilities

As Senior Cyber Threat Intelligence Analyst, you collect and analyze information to produce intelligence that supports the detection, assessment, and mitigation of cyber threats

Combine deep analytical tradecraft with structured investigation to surface proactive detection opportunities, and formalize investigative practice into repeatable processes and playbooks for the wider team

Working closely with SOC, Incident Response, Detection Engineering, and executive stake holders, you produce the intelligence that informs their decisions

Monitor, analyze, and assess cyber threats across OSINT, dark web, threat intelligence platforms, and proprietary sources, and conduct in-depth research on threat actors, TTPs, campaigns, and emerging vulnerabilities

Enrich intelligence with internal security telemetry, identify affected assets, and conduct investigations based on threat-actor profiling and campaign analysis

Pivot across host, network, and identity telemetry to investigate adversary infrastructure and activity

Design and document investigation playbooks and processes that translate individual expertise into repeatable, team-wide practice

Produce actionable reports and briefings for security teams and executives, applying structured analytic techniques and calibrated confidence

Translate investigative findings and intelligence requirements into detection logic recommendations, handed off to Detection Engineering for implementation

Contribute to and help refine investigation methodology, evidence handling, source evaluation, and intelligence quality standards

Apply LLM-based tools for triage, summarization, and entity extraction, with a sharp eye on output quality and limitations

Partner with SOC, Incident Response, Vulnerability Management, Detection Engineering, and Product Security to sharpen detection and response, and maintain relationships with industry partners, ISACs, and sharing communities

Qualifications

• Degree in Cybersecurity, Computer Science, or a related field — or equivalent practical experience 5+ years in cybersecurity with a focus on threat intelligence, SOC, or incident respond
• Deep knowledge of attack methodologies and TI frameworks (MITRE ATT&CK, Cyber Kill Chain, Diamond Model, F3EAD or comparable)
• Proven investigative tradecraft: adversary infrastructure analysis and pivoting across host, network, and identity data, grounded in structured analytic techniques and source evaluation
• Hands-on experience writing and refining investigative queries (KQL, Logscale, or comparable) against endpoint and network telemetry
• Demonstrated experience designing investigation processes and playbooks, and establishing them as team practice
• Hands-on understanding of Linux, networking, identity, and endpoint technologies
• Practical experience applying LLM-based tools to analytical workloads, with a critical approach to evaluating output quality
• Excellent technical writing and presentation skills, including executive-level communication

We are on a journey to create the best Infineon for everyone. We strive to create the best Infineon for everyone by embracing diversity and inclusion. We welcome applicants for who they are and offer a workplace built on trust, openness, respect and equal opportunity. Our hiring decisions are based on skills and experience. Even if you don't meet every requirement, we encourage you to apply. Please let your recruiter know if you need any accommodations during the interview process. Learn more about our various contact channels and about Diversity & Inclusion at Infineon.