Threat & Vulnerability Intelligence Analyst

HRTX; Philippines; On-site; PHP 446,000 - 1,004,000; Full time

Job summary

HRTX in the Philippines seeks a Vulnerability Analyst to identify and communicate new threats, focusing on vulnerability intelligence, detections, and in-the-wild exploits. You will produce intelligence summaries for clients and review high-impact vulnerabilities, proofs-of-concept, and exploit reports.

Key responsibilities include risk assessment, writing TTP notes, and developing detection templates; you will work with MITRE ATT&CK, Diamond Model, and Cyber Kill Chain frameworks, and use tools

Qualifications

• Demonstrable experience writing reports on technical subject matter (e.g., vulnerability exploits, malware infection chains).
• Disciplined time management and ability to work independently.
• Self-starting, collaborative, and able to accept feedback.
• Solid grasp of cybersecurity principles, attack trajectories, and vulnerability analysis.
• Experience researching and analyzing new cyber threats and using threat intelligence models.

Responsibilities

• Vulnerability Lead Identification and Analysis: identify and assess emerging vulnerabilities and exploits.
• Author Insikt Notes: write TTP Instances with mitigation summaries and references.
• Detection Engineering: design Nuclei templates for vulnerability scanning.
• Adhere to Infinit-O policies and protect client information; report risks to supervisor.

Skills

Technical writing

Threat detection

Vulnerability analysis

Team collaboration

Self-motivation

Time management

Attention to detail

Feedback adaptability

Education

B.S. equivalent in computer science

Information systems

Cyber intelligence

Tools

MITRE ATT&CK

D3FEND

Diamond Model

Cyber Kill Chain

DomainTools

VirusTotal

Shodan

Burp Suite

Nmap

Fiddler

ZAP

Metasploit

Wireshark

Job description

HRTX in the Philippines seeks a Vulnerability Analyst to identify and communicate new threats, focusing on vulnerability intelligence, detections, and in-the-wild exploits. You will produce intelligence summaries for clients and review high-impact vulnerabilities, proofs-of-concept, and exploit reports.

Key responsibilities include risk assessment, writing TTP notes, and developing detection templates; you will work with MITRE ATT&CK, Diamond Model, and Cyber Kill Chain frameworks, and use tools