Threat Intelligence Analyst – Security Research

Houston Skilled Consultancy; Singapore; Hybrid; SGD 60,000 - 110,000; Full time

Benefits offered by this job

Remote or Hybrid work

Career development opportunities

Certification support

Competitive compensation

Job summary

Houston Skilled Consultancy is seeking a detail-oriented Threat Intelligence Analyst – Security Research to identify emerging cyber threats, investigate malicious activities, and provide actionable intelligence that strengthens organizational security. The role emphasizes threat actor profiling, OSINT collection, and MITRE ATT&CK mapping to support proactive defense.

You will collaborate with incident response, security engineering, and risk teams to translate complex findings into practical

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field preferred.
• Professional cybersecurity certifications or demonstrable practical research experience may be considered.
• Strong understanding of information security principles, networking, operating systems, and common cyberattack methods.
• Experience with OSINT techniques and multiple reliable sources.

Responsibilities

• Threat Research and Analysis: Identify emerging cyber threats and attack techniques to inform defense.
• Threat Intelligence Collection: Gather intel from OSINT, advisories, reports, feeds, and databases.
• Threat Actor Profiling: Profile threat actors and TTPs with historical campaigns.
• Cyber Threat Monitoring: Track ransomware, phishing, malware, and data breaches.
• Security Research: Investigate malware behavior and adversary infrastructure to support defenses.
• Intelligence Validation: Assess credibility and relevance of sources to reduce false positives.

Skills

Threat intelligence concepts

OSINT techniques

MITRE ATT&CK mapping

Analytical thinking

Written communication

Scripting (Python/PowerShell)

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM

EDR

Threat intelligence platforms

Vulnerability databases (CVE/NVD)

Job description

1. Job Summary

Houston Skilled Consultancy is seeking a detail-oriented and analytical Threat Intelligence Analyst – Security Research to identify emerging cyber threats, investigate malicious activities, and provide actionable intelligence that strengthens organizational security. The successful candidate will research threat actors, analyze attack patterns, monitor the evolving cybersecurity landscape, and help organizations understand and mitigate potential security risks.

In this role, you will work with cybersecurity professionals, incident response teams, security engineers, and risk management specialists to identify vulnerabilities, assess threat exposure, and develop intelligence reports that support informed security decisions. You will collect and analyze information from multiple sources, including open-source intelligence (OSINT), threat intelligence platforms, security advisories, malware research, and relevant technical communities.

The ideal candidate will possess strong research capabilities, critical thinking skills, and a genuine interest in cybersecurity. You should be comfortable translating complex technical findings into clear, practical recommendations for both technical teams and business stakeholders.

This position offers an opportunity to contribute to proactive cyber defense, deepen your expertise in threat research, and help organizations stay prepared for increasingly sophisticated cyberattacks.

2. Key Responsibilities

• Threat Research and Analysis: Research emerging cyber threats, attack techniques, malicious campaigns, and threat actor activities to identify potential risks to organizational systems and information assets.
• Threat Intelligence Collection: Gather intelligence from reputable public sources, security advisories, industry reports, threat feeds, vulnerability databases, and approved internal security systems.
• Threat Actor Profiling: Investigate cybercriminal groups, advanced persistent threat (APT) groups, and other relevant threat actors by examining their objectives, tactics, techniques, procedures, and historical campaigns.
• Cyber Threat Monitoring: Monitor developments involving ransomware, phishing, malware, credential theft, supply chain attacks, data breaches, and other relevant cybersecurity threats.
• Security Research: Conduct technical research into attack methodologies, exploitation trends, malware behavior, and adversary infrastructure to support proactive security measures.
• MITRE ATT&CK Mapping: Map observed adversary behaviors to the MITRE ATT&CK framework to help security teams understand attack techniques and identify defensive gaps.
• Indicators of Compromise (IOCs): Identify, validate, document, and communicate indicators of compromise, including malicious IP addresses, domains, file hashes, URLs, and other relevant artifacts.
• Vulnerability Intelligence: Review newly disclosed vulnerabilities, security advisories, and available exploitation evidence to help prioritize remediation based on threat relevance and potential business impact.
• Intelligence Reporting: Prepare concise threat intelligence briefs, technical research reports, threat actor profiles, and executive summaries with practical recommendations.
• Incident Response Support: Provide intelligence support during security incidents by researching attack origins, identifying related campaigns, and supplying relevant indicators and contextual information.
• Threat Hunting Collaboration: Work with security operations and threat hunting teams to develop research hypotheses, identify suspicious activity, and improve detection capabilities.
• Security Tool Utilization: Use approved threat intelligence platforms, SIEM solutions, EDR tools, and other security technologies to investigate threats and correlate relevant findings.
• Intelligence Validation: Assess the credibility, reliability, timeliness, and relevance of intelligence sources to minimize false positives and unsupported conclusions.
• Risk Assessment: Evaluate potential threats based on likelihood, impact, exposure, and relevance to the organizations technology environment.
• Research Documentation: Maintain accurate records of research activities, analytical methods, evidence, findings, and recommendations.
• Stakeholder Communication: Present intelligence findings to security teams, technical leaders, and management in a clear, structured, and actionable format.
• Continuous Improvement: Track changes in the threat landscape, evaluate new research methods, and recommend improvements to intelligence collection and analysis processes.
• Confidentiality and Compliance: Handle sensitive information responsibly and follow applicable data protection requirements, company policies, and authorized research procedures.

3. Required Skills and Qualifications

Educational Qualifications

Bachelors degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline is preferred.

Relevant cybersecurity certifications, specialized training, or demonstrable practical research experience may be considered.

A strong understanding of information security principles, networking, operating systems, and common cyberattack methods is essential.

Technical Skills

Knowledge of cyber threat intelligence concepts, collection methods, analysis techniques, and intelligence lifecycle processes.

Familiarity with OSINT techniques and the ability to assess information from multiple reliable sources.

Understanding of common attack vectors, including phishing, ransomware, malware, credential compromise, and exploitation of software vulnerabilities.

Familiarity with the MITRE ATT&CK framework and its application to threat analysis.

Knowledge of indicators of compromise, threat actor behaviors, and tactics, techniques, and procedures (TTPs).

Understanding of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, VPNs, and common network security concepts.

Familiarity with Windows and Linux operating systems, system logs, and security event analysis.

Experience with threat intelligence platforms, SIEM tools, EDR solutions, or related security technologies is an advantage.

Basic scripting knowledge in Python, PowerShell, or Bash is beneficial for automating research and analyzing security data.

Familiarity with vulnerability databases, such as the Common Vulnerabilities and Exposures (CVE) database and the National Vulnerability Database (NVD).

Understanding of malware analysis concepts, digital forensics fundamentals, and incident response processes is desirable.

Ability to write clear technical documentation and communicate research findings effectively.

Professional Skills

Strong analytical thinking and problem-solving abilities.

Excellent research, information validation, and investigative skills.

High attention to detail and a commitment to evidence-based conclusions.

Ability to prioritize competing tasks and manage research assignments effectively.

Strong written and verbal communication skills.

Ability to collaborate with cross-functional cybersecurity teams.

Professional judgment when handling confidential and sensitive information.

Willingness to learn new tools, techniques, and emerging cybersecurity concepts.

4. Experience

Candidates with different levels of cybersecurity experience may be considered based on their technical knowledge and research capabilities.

Preferred Experience:

• Approximately 1–3 years of experience in threat intelligence, cybersecurity research, security operations, incident response, vulnerability analysis, or a related field.
• Experience collecting and analyzing threat intelligence from open-source and commercial sources.
• Demonstrated ability to research cyber threats and prepare structured analytical reports.
• Familiarity with threat intelligence feeds, IOCs, attack techniques, and threat actor profiles.
• Experience supporting security investigations, threat hunting, or vulnerability prioritization is an advantage.
• Exposure to enterprise security environments and security monitoring technologies is desirable.

Candidates with less professional experience may also be considered if they can demonstrate relevant technical knowledge through academic projects, cybersecurity labs, practical research, recognized certifications, or a portfolio of lawful security research.

The level of responsibility and independence will be aligned with the candidates demonstrated capabilities and the organizations requirements.

5. Working Hours

Employment Type: Full-time.

Typical Schedule: 40 hours per week, subject to applicable employment requirements and company policy.

Working Days: Monday to Friday, depending on project and client requirements.

Work Arrangement: Remote, hybrid, or on-site, as specified in the final employment offer.

Flexibility: Some flexibility may be available to accommodate research activities, team collaboration, and project deadlines.

Incident Support: Occasional after-hours support may be required during significant security incidents or urgent threat investigations, subject to the agreed employment terms.

Time Zone: Candidates may need to coordinate with colleagues or clients across different time zones.

The confirmed schedule, location, compensation, and any on-call arrangements will be communicated during the recruitment process.

6. Knowledge, Skills, and Abilities

Knowledge

Cyber threat intelligence methodologies and the intelligence lifecycle.

Cybercriminal operations, adversary behavior, and common attack techniques.

OSINT collection, source evaluation, and research validation.

Network security, endpoint security, identity security, and common enterprise technologies.

Malware, phishing, ransomware, and exploitation trends.

Vulnerability intelligence and risk-based remediation principles.

MITRE ATT&CK and other relevant cybersecurity frameworks.

Security incident investigation and threat hunting fundamentals.

Data handling, confidentiality, and responsible cybersecurity research practices.

Skills

Ability to collect, correlate, and interpret threat information from diverse sources.

Ability to distinguish actionable intelligence from unverified or low-confidence information.

Technical report writing and presentation skills.

Research documentation and evidence management.

Analytical reasoning and pattern recognition.

Use of security research tools and threat intelligence platforms.

Basic scripting and data analysis, where applicable.

Ability to communicate technical risks in business-relevant terms.

Abilities

Ability to investigate complex cybersecurity questions methodically.

Ability to identify relationships between threat indicators, campaigns, and attacker behaviors.

Ability to work independently while maintaining effective collaboration with other teams.

Ability to adapt to rapidly changing cyber threats and evolving research priorities.

Ability to handle confidential information with integrity and discretion.

Ability to make well-supported recommendations based on available evidence.

Ability to manage multiple research assignments while maintaining accuracy and quality.

7. Benefits

• Competitive Compensation: Salary based on experience, technical expertise, role responsibilities, and market conditions.
• Professional Development: Opportunities to strengthen knowledge of threat intelligence, security research, and emerging cyber defense techniques.
• Learning Opportunities: Access to relevant training materials, technical workshops, and knowledge-sharing sessions, where available.
• Certification Support: Potential support for relevant cybersecurity certifications, subject to company policy.
• Career Growth: Opportunities to progress into senior threat intelligence, security research, threat hunting, or cybersecurity leadership roles.
• Collaborative Environment: Opportunities to work with professionals across security operations, incident response, and risk management.
• Work Arrangement Options: Remote or hybrid working possibilities where the position and client requirements permit.
• Meaningful Work: The opportunity to help organizations understand and defend against real-world cyber threats.
• Performance Recognition: Potential recognition for high-quality research, valuable intelligence contributions, and professional development.
• Employee Support: Applicable leave, statutory benefits, and other employment benefits in accordance with company policy and local regulations.
• Specific benefits, allowances, insurance coverage, paid leave, and certification reimbursements will be confirmed during the hiring process. They should not be assumed unless included in the formal offer.

8. Why Join Houston Skilled Consultancy?

Joining Houston Skilled Consultancy as a Threat Intelligence Analyst – Security Research offers an opportunity to contribute to a field that plays a vital role in