Threat Intelligence Specialist – APAC
The Threat Intelligence Specialist investigates identity fraud and threat-actor activity, conducts pivot-based OSINT, and supports urgent law enforcement operations across APAC hours. The role requires at least three years of relevant analytical experience, strong communication skills, and the ability to work autonomously across time zones.
About the job
Responsibilities
- Analyze data and information to identify confirmed relationships.
- Research and document threat actor tactics, including fake law enforcement personas and agencies, compromised legitimate agent accounts and credentials, and abuse of trusted access for fraudulent purposes.
- Communicate with international government agencies across time zones by phone and email.
- Establish and nurture relationships with law enforcement agencies and personnel worldwide.
- Foster cross-departmental engagement and streamline workflows.
- Respond promptly and efficiently to user needs.
- Stay current with industry and market trends.
Requirements
- At least 3 years of hands-on experience in threat intelligence, identity fraud investigation, or a related analytical discipline.
- Proficiency in pivot-based OSINT, including passive DNS, ASN attribution, WHOIS/RDAP, certificate transparency, and email infrastructure analysis.
- Fluency in English.
- Exceptional verbal and written communication skills.
- Ability to operate across multiple time zones.
- Self-starter who can work autonomously.
- Excellent interpersonal skills for engaging with diverse management levels.
Preferred Qualifications
- Experience with account takeover, synthetic identity fraud, data theft/extortion, spearphishing and targeted intrusions, underground cybercrime ecosystems, and organizational impersonation.
- Expertise in network- and host-based security controls.
- Experience designing, using, and training others on proprietary and open-source tools such as Shodan, Censys, VirusTotal, and APIs.
- Proficiency applying the MITRE ATT&CK framework operationally.
- Law enforcement experience in cyber investigation, financial crimes, or digital forensics, or experience with the legal process ecosystem, including subpoenas, EDRs, and court orders.
- Experience in FinTech, cryptocurrency, or identity verification platforms where identity fraud is a primary threat vector.
- Fluency in Hindi or Thai.
Compensation and Benefits
- Competitive compensation with superannuation factored into the salary offer.
- Private health insurance coverage through Bupa and Allianz.
- Equity opportunities.
- Opportunities to support critical law enforcement operations worldwide and work on high-priority matters.
Skills
Threat Intelligence, Identity Fraud Investigation, Osint, Passive Dns, Asn Attribution, Whois/Rdap, Certificate Transparency, Email Infrastructure Analysis, Account Takeover, Synthetic Identity Fraud, Shodan, Censys, Virustotal, Mitre Att&Ck, Digital Forensics
Similar jobs
Security Engineering jobs
GitLab
Australia
This remote Security Incident Response Engineer detects, investigates, and resolves security incidents while improving automation, documentation, and detection capabilities. The role requires SIEM and cloud experience, Python skills or willingness to learn, and an interest in forensic investigations.
Supabase
Remote
Secures Supabase’s cloud platform, Kubernetes environments, containers, and infrastructure by conducting risk assessments, strengthening controls, and building scalable security guardrails. Requires senior-level platform or cloud security experience with deep AWS, Kubernetes, container, and Linux expertise.
Kodex
Sydney, Australia
The Threat Intelligence Specialist investigates identity fraud and threat actors, conducts pivot-based OSINT, and collaborates with law enforcement agencies across EMEA. The role requires at least three years of relevant analytical experience, strong communication skills, and the ability to work autonomously across time zones.
Vanta
Remote
Leads a global Security Operations team, setting detection, response, and security strategy while driving incident response and risk remediation. The role requires strong SaaS and cloud security experience, leadership ability, familiarity with major security standards, and responsible use of AI.
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.