Cyber Threat Intelligence Analyst

Overview

An early-career Threat Intelligence Analyst role supporting the collection, analysis and dissemination of cyber threat intelligence to help anticipate, detect and respond to cyber threats, working closely with the SOC, Incident Response, Detection Engineering and Cyber Defence teams.

What you'll do

• Collect and analyse cyber threat intelligence from open-source, deep web, dark web, commercial, vendor, and industry sources.
• Monitor emerging threats, vulnerabilities, malware campaigns, credential exposures, data leaks and threat actor activity relevant to ADI.
• Support the creation and distribution of threat intelligence briefings, reports, and summaries for technical and non-technical audiences.
• Maintain awareness of threat actor tactics, techniques, and procedures (TTPs) using frameworks such as MITRE ATT&CK.
• Assist SOC and Incident Response teams by providing contextual intelligence during security investigations.
• Identify indicators of compromise (IOCs) and support operationalisation into security tools and detection platforms.
• Support proactive threat hunting activities by identifying relevant threats and hypotheses for investigation.
• Track industry and sector-specific threats affecting semiconductor, manufacturing, cloud, and enterprise environments.
• Assist with intelligence requirements gathering and mapping threats to business risks.
• Maintain threat intelligence documentation, repositories, watchlists, and reporting dashboards.
• Participate in tabletop exercises, purple-team activities, and lessons-learned reviews to improve defensive readiness.
• Contribute to continuous improvement of threat intelligence processes and intelligence sharing practices.
• Assist the SOC in the triage, investigation, and response of security alerts, incidents, and escalations.
• Maintain flexibility to support global cybersecurity operations, including participation in management meetings, vendor engagements, support calls, incident response activities, and after-hours escalations across multiple time zones as needed.

What you'll need

• Bachelor's degree in Cybersecurity, Intelligence, Computer Science, Information Technology, or equivalent experience.
• 1–3 years experience in cybersecurity, IT operations, intelligence analysis, SOC operations, or related technical field.
• Understanding of cybersecurity fundamentals including phishing, malware, ransomware, business email compromise, and common attack techniques.
• Experience conducting threat intelligence collection and monitoring across open-source, deep web, and dark web sources to identify emerging threats, threat actors, compromised credentials, and organizational risks.
• Basic understanding of threat intelligence concepts including IOCs, threat actors, TTPs, and intelligence lifecycle principles.
• Strong analytical thinking, curiosity, and research skills.
• Ability to identify patterns, connect information from multiple sources, and communicate findings clearly.
• Strong written and verbal communication skills.

Nice to have

• Experience leveraging AI, generative AI, and agentic security capabilities to enhance threat detection, investigation, response, and SOC operational efficiency.
• Knowledge of the MITRE ATT&CK framework.
• Experience with intelligence platforms, security monitoring tools, threat feeds, or OSINT research tools.
• Basic scripting or data analysis experience using Python, KQL, PowerShell, SQL, or similar technologies.
• CompTIA Security+, CySA+, SC-200, CTI-related certifications, or equivalent qualifications.
• Experience with threat hunting, CTFs, internships, malware analysis labs, or cyber research projects.

Details

• Location: Bangalore, India (Nova).
• Required travel: Yes, 10% of the time.
• Shift type: 1st Shift/Days.
• Job requisition type: Experienced.
• Export licensing review may apply to applicants who are not US Citizens, US Permanent Residents, or protected individuals as defined by 8 U.S.C. 1324b(a)(3).