Threat Landscape Analyst

Infinit-O; Pasay; On-site; PHP 480,000 - 720,000; Full time

Job summary

Infinit-O is seeking a Threat Landscape Analyst to produce finished intelligence reports for clients, using OSINT and internal tools to analyze cyber threats. You will deliver industry stories and write-ups tailored for tactical and executive audiences.

The role involves collaborating with global teams, mapping findings to MITRE ATT&CK and CVEs, and delivering concise, actionable recommendations under tight deadlines.

Qualifications

• 1–2 years of professional experience in technical writing, due diligence, risk assessments, or threat intelligence reporting.
• 1–2 years in the cyber security or cyber threat-related field.
• Strong English-language writing and communication skills.

Responsibilities

• Produce high-quality finished intelligence reports and executive write-ups.
• Research trending cyber threat events using OSINT and internal tools.
• Analyze client-specific data to identify potential threats to their infrastructure.
• Develop industry stories and correlate findings with MITRE ATT&CK and CVEs.
• Draft logical assessments, outlooks, and actionable recommendations.

Skills

OSINT methodologies

MITRE ATT&CK

Threat intelligence

Technical writing

Documentation skills

Education

Bachelor's degree in Computer Science / Information Systems / Cyber Intelligence or related field

Tools

Recorded Future Intelligence Cloud

Google Docs

Google Sheets

Google Slides

Job description

Position Summary

As a Threat Landscape Analyst, you will be responsible for producing high quality finished intelligence reports that provide clients with meaningful actionable insights on emerging cyber threats. To do so, you will be responsible for conducting research via open-source intelligence (OSINT) and internal tools such as the Client Intelligence Cloud to analyze and assess cyber threats, produce detailed findings, and contribute to a comprehensive view of the cyber threat landscape. Your research and analysis will directly support clients in understanding potential risks to their infrastructure and operations. The intelligence reports and write-ups you produce will be tailored for a tactical or executive audience.

Key Responsibilities

Research and Intelligence Report Writing

• Conduct in-depth research on trending cyber threat events, using open-source intelligence (OSINT) and the Recorded Future Intelligence Cloud. Use the research to produce a finished intelligence report that meets the customers needs. Ensure that the findings provide meaningful and actionable insights for clients.

• Analyze client-specific data to determine potential threats to their infrastructure.

• Produce threat landscape intelligence reports on a daily, weekly, monthly, and quarterly reports. Intelligence reports are completed via a “first chair” (primary assignee) and “second chair” (secondary assignee) basis.

• Produce “industry stories” (typically two per week), which are comprehensive writeups that focus on the following:

  • New and emerging cyber threat trends (novel malware, vulnerabilities, or threat actor tactics, techniques, and procedures (TTPs))

  • Prominent cyber attacks or cyber-related events that are widely reported across news outlets or security blogs

• Correlate findings with threat intelligence frameworks such as MITRE ATT&CK and CVE standards.

• Develop logical assessments and outlooks on cyber threat incidents, identifying the "so what", “now what”, and “then what” factors and potential impacts on clients.

• Stay on top of novel or emerging cyber threats, including malware, phishing, software vulnerabilities (CVEs), exploits, and attack methodologies.

• Ensure all reports and assessments adhere to Recorded Future’s professional and high-level standards, which include intelligence writing, critical thinking, and analysis.

Collaboration, Process Improvement, and Best Practices

• Work closely with the Threat Intelligence (US, UK, AU) and Data Science (Philippines) teams to ensure client intelligence requirements are met effectively.

• Curate and validate threat entities referenced in intelligence reports.

• Actively participate in team discussions via regular meetings to improve internal workflows or brainstorm on new threat intelligence processes and research methodologies.

• Contribute to process improvements and best practices in cyber threat research and intelligence reporting.

Must-Have Qualifications

Experience

• At least one (1) to two (2) years of professional experience in technical writing, due diligence, risk assessments, physical threat intelligence, fraud intelligence, or any role requiring substantial report writing.

• At least (1) to two (2) years of professional experience in the cyber security and cyber threat-related field.

Technical & Analytical Skills

• Basic understanding and knowledge of cyber threats (malware, phishing, trojans, botnets, etc.) and the broader cyber threat landscape.

• Basic understanding of defense strategies, risk reduction, and threat mitigation, with the ability to deliver detailed recommendations that help Recorded Future clients protect against emerging cyber threat trends

• Familiar with cyber threat analysis, intelligence research, and OSINT methodologies.

• Ability to accurately interpret raw data and translate it into technical writing.

• Familiarity with MITRE ATT&CK and CVEs.

• Can accurately map MITRE tactics, techniques, and procedures (TTPs) to the cyber kill chain.

• Ability to create logical assessments, recommendations, and outlook related to cyber events (i.e, identifying the "so what", “now what”, and “then what” factors and potential impacts on clients)

• Excellent documentation skills; sufficient or advanced experience using Google Docs, Google Sheets, and Google Slides, which the team uses on a daily basis. The ability to produce charts and graphs that align with findings and analysis required for intelligence reports is a plus.

Communication & Writing Skills

• Strong English-language grammar (preferably American English).

• Strong reading comprehension skills.

• Strong English verbal communication skills.

• Strong time management and organizational skills in order to meet tight deadlines

• Ability to produce structured, concise, and insightful written analysis tailored to different audiences.

• A self-starting, proactive mindset committed to maintaining high standards in a fast-paced environment.

• Ability to work both independently and collaboratively.

Work Ethics

• Excellent attention to detail and accuracy.

• Curiosity-driven approach to research and problem-solving.

• Ability to work independently and collaborate in a fast-paced team environment.

• Strong time management and organizational skills to meet strict deadlines.

• Adaptive mindset with a willingness to embrace change and process improvements.

Information Security & Compliance

• Safeguard client-supplied and client-generated information from unauthorized access, disclosure, modification, destruction, or interference.

• Carry out assigned tasks in alignment with processes related to information security and overall operational procedures.

Desirable (Nice to Have)

Technical Proficiency

• Intermediate to advanced-level expertise with conducting open-source research or using OSINT to produce meaningful information for a technical or executive audience.

• Experience with generative artificial intelligence (AI) tools to aid with research and cyber threat intelligence analysis, writing, workflow improvement, etc.

• Intermediate to advanced-level expertise with proposing actionable mitigations and/or defense measures to combat emerging threat trends and TTPs

• Familiarity with JIRA for task management.

Industry Knowledge

• Updated with recent cyber trends, cyberattacks, vulnerabilities, and emerging cyber threats.

• Intermediate to advanced level knowledge of the cyber threat landscape. These include (but not limited to): novel malware or threat actors, cyberattack TTPs, N-days and zero-days, red-teaming tools used for malicious activities, etc.

• Ability to propose actionable mitigations and defensive strategies based on research findings.

Education & Certifications

• Preferred but not required: A Bachelor of Science (BS) degree in Computer Science, Information Systems, Cyber Intelligence, or a related field.

• Relevant cybersecurity certifications (e.g., Security+, CySA+, GCTI, GCIA, CISSP) are a plus.