Senior Cyber Analyst

We are recruiting for a Senior Cyber Analyst to join our team at Admiral Money!

About us

Admiral Money is the dynamic lending arm of Admiral Group, offering personal loans, motor finance, and homeowner loans since 2017. We’re building something special for our customers and are looking for curious, driven individuals ready to learn, take on challenges, and make an impact.

We’re proud to be a certified Great Place to Work for over 25 years, with recognition for Women and Wellbeing. Our inclusive culture empowers everyone to Be You.

Need support during the recruitment process? Just let us know – we’re here to help.

Please note: The successful candidate will be expected to attend the Cardiff office up to two times per month.

The role

Admiral Money is a fast-growing, FCA-regulated consumer lender operating in a cloud-native environment. Our small Cyber team delivers a significant impact across the business, covering everything from threat detection and vulnerability management to security architecture and regulatory compliance.

As a Senior Cyber Security Analyst, you'll be a key technical voice within the team. You'll be involved in day-to-day security operations, our vulnerability management programme, and bring genuine cloud security expertise to a business that runs primarily on AWS.

You'll be a cyber security generalist with deep expertise in key areas, working closely with Engineering, Infrastructure and Platform teams. You'll be comfortable advising stakeholders at all levels and translating technical risk into language that supports effective business decision-making.

We're looking for someone who is curious, pragmatic, and enjoys working through complex details.

Key Responsibilities

Security Operations & Threat Detection

• Monitor and triage security alerts from SIEM, EDR and cloud-native tooling (AWS Security Hub, GuardDuty, CloudTrail, Defender).
• Lead incident response investigations from initial triage through to root cause analysis and lessons learned.
• Maintain and improve detection rules, alerting thresholds and response playbooks.
• Participate in an on-call or escalation rota as required.

Vulnerability Management

• Own the vulnerability management lifecycle, including scanning, triage, prioritisation and remediation tracking across cloud and on-premise assets.
• Work with Engineering and Infrastructure teams to ensure timely remediation in line with agreed SLA targets.
• Produce clear, actionable vulnerability reporting for both technical and non-technical audiences.
• Track and challenge exceptions, ensuring risk-based decisions are documented appropriately.

Cloud Security

• Apply security best practice across AWS (primary) and Azure environments, including IAM policy reviews, storage security, network controls, secrets management and logging coverage.
• Conduct configuration reviews and contribute to Cloud Security Posture Management (CSPM) tooling.
• Advise on secure design principles for new cloud workloads and architecture changes.
• Support Infrastructure and Platform teams in embedding security into IaC pipelines and CI/CD processes.

Risk & Compliance

• Contribute to the maintenance of the risk register, control evidence and policy library.
• Support internal and external audit activity, including evidence preparation, responding to findings and tracking remediation activities.
• Assist in maintaining compliance with FCA expectations, PCI DSS and relevant data protection requirements.
• Horizon-scan for emerging threats and regulatory changes relevant to the business.

Stakeholder Engagement & Cyber Consultancy

• Act as a trusted technical advisor to colleagues across TSS and the wider business.
• Contribute to the Cyber team's strategy, roadmap and continuous improvement initiatives.
• Act as a subject matter expert, providing internal cyber security consultancy across the business.
• Support engineering squads as a trusted source of cyber security expertise.

Skills & Experience

Essential

• Broad cyber security knowledge across technology, risk and engineering, with experience operating across multiple disciplines.
• Strong hands-on experience in a cyber security role, ideally within a regulated financial services environment.
• Strong working knowledge of AWS security services, including GuardDuty, Security Hub, CloudTrail, IAM, Config and WAF.
• Experience operating and tuning a SIEM platform (e.g. Google SecOps, Sentinel).
• Demonstrable experience in vulnerability management, including tooling, triage and driving remediation alongside engineering teams.
• Hands-on involvement in incident response processes and security investigations.
• Ability to communicate technical concepts and risks clearly to non-technical stakeholders.
• Sound understanding of common attack techniques, with familiarity of the MITRE ATT&CK framework.

Desirable

• Azure security experience, including Defender for Cloud, Entra ID and Sentinel.
• Relevant certifications such as AWS Security Specialty, CompTIA Security+, CySA+, SC-200, CEH or equivalent.
• Experience within an FCA-regulated environment and familiarity with operational resilience requirements.
• Exposure to PCI DSS, ISO 27001 or SOC 2 control frameworks.
• Scripting experience using Python, PowerShell or Bash for automation and tooling activities.

What We're Looking For

We're looking for someone who:

• Takes ownership and proactively drives work forward when opportunities or issues are identified.
• Balances attention to detail with a pragmatic approach and understands the difference between meaningful security controls and unnecessary complexity.
• Collaborates effectively with colleagues across Platform, Infrastructure, Engineering and the wider business.
• Demonstrates a commitment to continuous learning in an evolving threat landscape.

Admiral: Where You Can

We take pride in being a diverse and inclusive business. It's a place where you can Be You, and show up as you are. We’re committed to fostering a people-first culture where everyone is accepted, supported, and empowered to be brilliant. You can, Grow And Progress at a pace and direction that suits you, Make A Difference for our customers and each other, and Share in Our Future with all colleagues eligible for up to £3,600 of free shares each year after one year of service.

Everyone receives 33 days holiday (including bank holidays) when they join us, increasing the longer you stay with us, up to a maximum of 38 days (including bank holidays). You also have the option to buy or sell up to an additional five days of annual leave.

We’re proud of our people-first culture. In fact, we've been recognised as a Great Place to Work for Women, a Great Place to Work for Wellbeing, and an overall Great Place to Work for over 25 years! We’re fully committed to making sure your progression is not slowed or halted by barriers related to race, gender, age, sexuality or any of the protected characteristics.

Our fantastic benefits make sure our colleagues have a great work-life balance; You can view some of our other key benefits here.

As a Disability Confident Leader, for candidates with a disability or long-term health condition, that opt into the Disability Confident scheme, we’ll invite a fair and proportionate number of applicants that meet the essential requirements of the role to the first stage of our selection process.

If you need any adjustments or support with your application or during the recruitment process, just let us know. Please do email eden.davies39@admiralgroup.co.uk or contact us on   07780038264. This number is dedicated to supporting candidates that require reasonable adjustments or support during the application process.

#LI-ED1 #LI-Money