Threat Intel Analyst, L1

NexTbil Tech

. Monitor threat intelligence sources, open-source intelligence, dark web sources, social media, data leak sites, threat feeds, and external attack surface indicators .

Posted 9/25/2026contractRemote • MalaysiaJuniorMid-LevelWebsite

Tech Stack

Tools & technologies

Cyber SecurityOpen Source

About the role

Key responsibilities & impact

Monitor threat intelligence sources, open-source intelligence, dark web sources, social media, data leak sites, threat feeds, and external attack surface indicators
Conduct VIP intelligence monitoring for senior executives and designated high-risk individuals
Identify impersonation, credential exposure, doxing, reputational threats, targeted phishing, and physical-digital risk indicators
Collect, validate, and enrich indicators of compromise, threat actor activity, vulnerabilities, campaigns, and emerging tactics, techniques, and procedures
Prepare intelligence reports, alerts, watchlists, and situational updates
Escalate credible threats, exposed credentials, impersonation attempts, brand abuse, and VIP-related findings according to playbooks and severity criteria
Support cyber threat investigations by correlating external intelligence with internal security telemetry, cases, alerts, and incident response activities
Maintain accurate records of intelligence collection, validation, analysis outcomes, escalations, and stakeholder communications
Maintain awareness of cyber threats affecting Malaysia, Southeast Asia, multinational organizations, senior executives, and relevant business sectors
Coordinate with global security operations, incident response, executive protection, and business stakeholders

Requirements

What you’ll need

Bachelor’s degree or completed studies in Cybersecurity, Information Technology, Computer Science, Intelligence Studies, International Relations, Criminology, or a related discipline
2+ years of experience in cybersecurity, threat intelligence, security operations, fraud monitoring, open source intelligence, investigations, or a related analytical role
Basic understanding of cyber threats, threat actors, phishing, malware, credential exposure, impersonation, data leakage, and social engineering techniques
Familiarity with OSINT techniques, threat intelligence platforms, SIEM tools, dark web monitoring, social media monitoring, or external attack surface monitoring concepts
Ability to assess information credibility, identify patterns, document findings clearly, and translate intelligence into actionable recommendations or escalation notes
Strong written and verbal English proficiency
Professional certifications such as CompTIA Security+, Network+, CEH, CySA+, GIAC Cyber Threat Intelligence, Microsoft security fundamentals, or equivalent entry-level cybersecurity or intelligence credentials preferred
Experience supporting threat intelligence, SOC, fraud monitoring, brand protection, executive protection, investigations, or managed security service environments preferred
Exposure to threat intelligence platforms, OSINT tools, dark web monitoring tools, social media intelligence platforms, phishing investigation tools, or digital risk protection platforms preferred
Understanding of VIP monitoring use cases preferred
Knowledge of the MITRE ATT&CK framework, cyber kill chain, threat actor profiling, indicator enrichment, and intelligence lifecycle concepts preferred
Understanding of compliance-focused environments and documented analysis, control adherence, data handling discipline, and audit support preferred

Benefits

Comp & perks

Competitive salary package
Performance-based bonuses
Flexible working options
Remote and hybrid working models
Comprehensive health insurance
Wellness initiatives
Physical and mental well-being resources
Training programs
Mentorship
Career development paths
Supportive, inclusive, and growth-focused environment
Team-building activities
Social events
Medical insurance
Structured learning, development, and career growth opportunities
Diverse, inclusive, and team-oriented culture