Threat Intelligence Analyst

The Threat Intelligence Analyst will be working to support specific intelligence types (tactical, operational and strategic) dependent on the tertiary team’s focus within the Threat Intelligence team. The analyst will primarily collect information retrieved from­ a wide range of internal and external sources to curate threat intelligence. The resultant threat intelligence will be disseminated to a diverse array of intelligence consumers within Admiral Group. Deliverables based on their intelligence type (tactical, operational and strategic) can range from the novel detection of adversarial attack paths to SOC analysts to the application of machine learning technologies for example, DeepFakes, to inform the business of emerging threats.

To succeed in this role, it is expected that the candidate will operate across the business to collect, synthesise and communicate the relevant outputs.  The candidate therefore needs to utilise multiple skill sets acquired from a varied work history whilst operating within a team to maintain pace and relevance at the speed of the external landscape.

Responsibilities

The Threat Intelligence Analyst will:

• Identifying and managing a wide range of intelligence sources to provide a holistic view of the threat landscape.
• Curation and maintenance of threat profiles to understand the credible adversary groups, campaigns and associated tactics, techniques and procedures in use.
• Create and map novel detection analytics to detect relevant TTPs against the MITRE ATT&CK framework.
• Analyse all-source intelligence and threat data feeds.
• Apply knowledge about threats into concrete detection capabilities.
• Ultimately deliver threat intelligence deliverables working across the threat intelligence lifecycle.

Essential Experience/Skills

• 2 years’ experience in cyber security with a focus on intelligence or similar.
• Strong attention to detail, with excellent analytical and problem-solving skills.
• Proven analytical, report-writing and verbal briefing abilities.
• Technical understanding of information security and cyber defence concepts.
• Exercising critical thinking to assess threats via the assimilation and interpretation of qualitative and quantitative data.
• Thorough understanding of the Cyber Kill Chain, MITRE ATT&CK and other information security defence and intelligence frameworks.

Desirable Skills

• Penetration testing or technical cyber security experience.
• Coding experience (Python, Bash, Powershell).
• One of more qualifications (BSc, MSc, PhD, CREST, TigerScheme, SANS, CISSP).
• Previous experience of threat intelligence is advantageous.
• Technical and applicable knowledge of the cyber threat landscape within the context of financial services including threat actors, attack paths, tactics, techniques and procedures, with effective counter measures in a financial services environment.

Location: we will be considering remote working with a few times per month at the office.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we're voted no. 1 in the 2019 Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

You can also view some of our other key benefits here; https://admiraljobs.co.uk/employee-benefits/.

#LI-LP1