About the position

As Threat Intelligence Analyst at ActiveFence, you will play a key role in online investigations, focusing on gathering, analyzing, and documenting intelligence from various online sources including the Vietnamese cybercrime ecosystem. Your primary objective will be to identify malicious activities, understand their origins, and analyze threat actor TTPs. Success in this role requires a technical and analytical mind, the ability to learn quickly, and a strong attention to detail. You should be comfortable working in a fast-paced, dynamic environment where critical thinking and adaptability are essential.

Responsibilities

• Conducting in-depth investigations on online platforms to identify malicious activities.
• Analyzing TTPs such as malicious tools used by threat actors.
• Monitoring websites, deep and dark web forums, messaging apps and other digital sources to detect potential threats to our customers
• Using state-of-the-art internal and external tools and OSINT/WEBINT methodologies.
• Producing high-quality reports, briefings, and presentations tailored to technical and non-technical audiences.

• Fluency in English (Written and Verbal)
• Experience in processing findings into written reports.
• Strong written and verbal communication skills
• Experience in running Windows files in a VM environment and inspecting network traffic
• Hands-on deep and dark web experience
• Threat hunting experience.

Nice to have:

• Familiarity with how malware works (Network traffic, Windows system)
• Familiarity with Windows file system, Chrome extensions
• Strong understanding of OPSEC principles
• Positive attitude, motivation, strong team player, and ability to work in a fast-paced, multi-tasked environment
• Excellent organizational skills and the ability to handle multiple research projects simultaneously.
• Proven ability to analyze and synthesize complex cyber threat data into clear, actionable intelligence.

ActiveFence is the leading provider of security and safety solutions for online experiences, safeguarding more than 3 billion users, top foundation models, and the world’s largest enterprises and tech platforms every day. As a trusted ally to major technology firms and Fortune 500 brands that build user-generated and GenAI products, ActiveFence empowers security, AI, and policy teams with low-latency Real-Time Guardrails and a continuous Red Teaming program that pressure-tests systems with adversarial prompts and emerging threat techniques. Powered by deep threat intelligence, unmatched harmful-content detection, and coverage of 117+ languages, ActiveFence enables organizations to deliver engaging and trustworthy experiences at global scale while operating safely and responsibly across all threat landscapes.