Junior Cyber Threat Analyst

Infinit-O; Pasay; On-site; PHP 420,000 - 640,000; Full time

Job summary

Infinit-O is seeking a threat researcher with strong English writing skills and OSINT experience to analyze malware and threat activity. You will map techniques to MITRE ATT&CK and Diamond Model, write concise reports, and develop detections for threat hunting.

The role emphasizes collaboration and strict adherence to security policies. Ideal candidates have at least six months of professional experience, familiarity with sandboxes and VM environments, and the ability to work on priority

Qualifications

• Must write clear, concise reports on malware, vulnerabilities, and offensive security tools.
• At least six months of professional experience in cybersecurity or cyber intelligence.
• Strong written and spoken English communication skills.
• Experience with OSINT and handling large data sets.
• Experience working with sandboxes, VMs, and malware analysis tools.
• Ability to map activity to MITRE ATT&CK tactics and techniques and Diamond Model.

Responsibilities

• Research adversary TTPs using open, closed, and proprietary sources.
• Focus on malware developments, exploits, cloud and mobile security in priority intel leads.
• Identify infection chains, IoCs, malware samples, threat actors, and ATT&CK mappings.
• Write at least 2 TTP Instance notes daily combining OSINT reporting and analysis.
• Analyze malware samples in sandbox environments and with analysis tools.
• Create at least 1 malware or vulnerability detection per month (e.g., YARA, Sigma, Snort).
• Follow Infinit-O policies and report any security events or risks.

Skills

Strong written communication

OSINT experience

English writing

Time management

Self-motivated

Collaborative mindset

Analytical thinking

Education

B.S. in Computer Science / Information Systems / Cyber Intelligence

Tools

Sandbox environments

Virtual machines

Malware analysis tools

Job description

Your Role

Here’s what you will be doing:

• Research new adversary tactics, techniques, and procedures (TTPs) using open sources, closed sources, and proprietary sources.
• Focus threat leads on team priority intelligence requirements such as malware developments, offensive security tools, vulnerability exploits, cloud security, and mobile security.
• Identify infection chains, host and network IoCs, malware samples, threat actors, and MITRE ATT&CK tactics and techniques during research.
• Write at least 2 TTP Instance notes daily, combining open-source reporting and own analysis to help customers understand infection chains and prepare defenses.
• Analyze malware samples using sandbox environments and static analysis tools to provide insight, validate reporting, uncover IoCs, and assist detection engineering.
• Create at least 1 malware or vulnerability detection per month (e.g., YARA, Sigma, Snort) for threat hunting, detection, and classification, usually delivered alongside a TTP Instance.
• Adhere to and implement Infinit-O's quality and information security policies, protecting client information and reporting any security events or risks.

About You

The company is looking for:

• Strong written communication skills in English.
• Experience writing clear, concise, and logical reports on technical subjects such as malware, vulnerability exploits, and offensive security tools.
• Disciplined time management and ability to thrive in a collaborative environment.
• Self-starting and self-motivated with ability to receive and apply constructive feedback.
• B.S. equivalent in computer science, information systems, or cyber intelligence.
• At least six months of professional experience.
• Experience with open-source intelligence (OSINT) and/or large data sets.
• Experience working with sandboxes, virtual machines, and malware analysis tools.
• Familiarity with the MITRE ATT&CK Framework and ability to map activity to ATT&CK tactics and techniques.
• Familiarity with interpreting and mapping cyberattacks to the Diamond Model of Intrusion Analysis.