Junior Cyber Threat Analyst

Infinit-O Group; Philippines; On-site; PHP 360,000 - 540,000; Full time

Job summary

Infinit-O Group is seeking a Junior Cyber Threat Analyst in Pasay, Philippines. The role involves researching adversary TTPs, analyzing malware, and creating detections while communicating findings clearly to colleagues and leadership.

The candidate will produce TTP instances daily, perform sandbox malware analysis, and ensure adherence to information security policies while collaborating with a security-focused team.

Qualifications

• B.S. in computer science, information systems, or cyber intelligence.
• At least six (6) months of professional experience.
• Experience with OSINT and/or large data sets.
• Experience with sandboxes, virtual machines, and malware analysis tools.
• Familiarity with MITRE ATT&CK Framework and mapping activity to tactics/techniques.
• Familiarity with Diamond Model of Intrusion Analysis.
• Adeptness in cybersecurity and data protection.

Responsibilities

• Identify threat leads from open, closed, and proprietary sources.
• Write TTP instance notes detailing identified threat leads (daily).
• Conduct malware analysis in sandbox environments to provide detection insight.
• Create malware or vulnerability detections (e.g. YARA, Sigma, Snort).
• Adhere to Infinit-O's information security policies and report security events or risks.

Skills

Strong written English

Report writing

Time management

Self-motivated

Team collaboration

Feedback oriented

Education

B.S. in computer science / information systems / cyber intelligence

Tools

Sandbox environments

Virtual machines

Malware analysis tools

OSINT tools

Job description

Pasay, Philippines | Posted on 08/17/2026

Infinit-O is the trusted customer-centric and sustainable leader in Business Process Optimization for Small and Medium businesses in the Financial Services, Healthcare, and Technology sectors by delivering continuous improvement through technology, data, and people.

Job Description

Role Background

TTP MNL reports on technical subject matter such as malware developments, offensive security tools, vulnerability exploits, cloud security, and mobile security. Junior Cyber Threat Analysts are expected to continuously familiarize themselves with these topics and identify threat leads from a variety of sources. Junior Cyber Threat Analysts are also expected to analyze malware and create effective detections, which their senior peers will review and validate. Junior Cyber Threat Analysts must be able to communicate this subject matter effectively to various audiences, both verbally and in writing.

Specific Duties and Responsibilities

• Threat Lead Identification: Research new adversary tactics, techniques, and procedures (TTPs) using open sources (public information such as security vendor reporting, social media, code repositories); closed sources (dark web and underground forums); and proprietary sources.
  • Subject Matter: Threat leads should focus on team priority intelligence requirements (PIRs). Examples of such subject matter include malware developments, offensive security tools, vulnerability exploits, cloud security, and mobile security.
  • Key Detail Identification: During research, identify and take note of infection chains, host and network IoCs, malware samples, threat actors, and MITRE ATT&CK tactics and techniques.
• Author Insikt Notes: Write TTP Instances detailing identified threat leads. TTP Instances include a combination of information from open-source reporting and your own analysis (i.e. code review, static malware analysis). TTP Instances are written and formatted to help our customers understand infection chains while also helping them prepare and validate their defenses.
  • Cadence: Write at least 2 TTP Instance notes daily
  • Quality: Authored TTP Instances should include minimal grammatical or syntax errors. Plagiarism is not acceptable.
• Malware Analysis: Using sandbox environments and static analysis tools, analyze malware samples associated with threat leads.
  • Use Cases: Malware analysis is used to provide additional insight into an event, validate open-source reporting, uncover additional IoCs, and assist peers and customers in detection engineering.
• Detection Engineering: Create malware or vulnerability detections (e.g. YARA, Sigma, Snort) that can be used for threat hunting, detection, and classification.
  • Cadence: Create at least 1 malware or vulnerability detection per month
  • Delivery: In most cases, these detections will be delivered alongside a TTP Instance.
• Information Security: Adhere to and implement Infinit-O's quality and information security policies and carry out its processes and procedures accordingly.
  • Protect client-supplied and generated-for-client information from unauthorized access, disclosure, modification, destruction, or interference (see also Table of Offenses).
  • Carry out tasks as assigned and aligned with particular processes or activities related to information security.
  • Report any potential or committed non-conformity, observation and/or security event or risks to immediate supervisor.

Required Skills

• Strong written communication in English
• Demonstrable experience writing reports on technical subject matter (e.g. malware, vulnerability exploits, offensive security tools) in a clear, concise, and logical format
• Disciplined time management
• Self-starting, self-motivated, and thrive in a collaborative environment
• Ability to receive and apply constructive feedback from peers and leadership

Minimum Qualifications

• B.S. equivalent in computer science, information systems, or cyber intelligence
• At least six (6) months of professional experience
• Experience working with open-source intelligence (OSINT) and/or large data sets
• Experience working with sandboxes, virtual machines, and malware analysis tools
• Familiarity with the MITRE ATT&CK Framework, including the ability map reported activity to ATT&CK tactics and techniques
• Familiarity with interpreting and mapping cyberattacks to the Diamond Model of Intrusion Analysis
• Adeptness in cybersecurity and data protection

Preferred Qualifications