Threat Intelligence Analyst
Bonhill PartnersWe are currently seeking a Cyber Security professional with a strong interest in threat intelligence to join an established security function. The successful candidate will help turn external and internal threat information into meaningful insight, ensuring that relevant teams understand emerging risks and can take appropriate action. The position offers a broad remit across threat research, security awareness, intelligence coordination, and operational support. You will work with technology and security stakeholders across the organisation, contributing to the development of a more proactive approach to identifying and managing cyber risk. Key Responsibilities Cyber Threat Intelligence
- Research current and emerging cyber threats using a variety of intelligence sources.
- Assess new attack activity and determine its relevance to the organisation.
- Investigate how threat actors operate and map their activity against recognised attack frameworks.
- Identify potential weaknesses and advise on measures that can reduce exposure.
- Produce concise intelligence updates, threat briefings, and wider security reports for relevant audiences.
- Keep stakeholders informed of significant developments within the wider threat landscape. Intelligence Coordination
- Assess intelligence notifications and determine which internal teams need to take action.
- Work with technology and security owners to ensure identified actions are understood and progressed.
- Maintain visibility of outstanding actions and provide updates to relevant global stakeholders.
- Collaborate with regional and international security teams to promote consistent processes and controls.
- Assist with time-sensitive security matters, including vulnerability-related activity and potential information leakage.
- Provide additional support to Security Operations during periods of increased demand. Security Awareness & Reporting
- Assist in planning and managing employee phishing simulation programmes.
- Work with third-party providers to coordinate campaign delivery and review outcomes.
- Prepare statistical analysis and management information following awareness exercises.
- Help track security awareness metrics and identify opportunities for improvement.
- Communicate security findings in a clear and accessible manner to technical and business audiences. Security Tools & Governance
- Contribute to the ongoing development and improvement of threat intelligence platforms and associated tooling.
- Liaise with vendors to investigate enhancements, integrations, and new functionality.
- Support the administration and upkeep of team collaboration and information-sharing platforms.
- Help maintain security procedures, governance material, standards, and supporting documentation.
- Contribute to initiatives designed to improve the overall maturity of the Cyber Security function. Skills & Experience Essential
- Minimum 3 years' experience working within Cyber Security, Security Operations, Threat Intelligence, or a closely related discipline.
- Previous experience collaborating with multiple technology and security teams.
- Practical exposure to monitoring, assessing, and communicating cyber threat information.
- Good knowledge of common attack techniques, threat actor behaviour, and defensive security concepts.
- Ability to interpret technical information and turn it into clear, actionable recommendations.
- Experience preparing reports, briefings, dashboards, or other security communications.
- Strong analytical and investigative skills.
- Excellent attention to detail and a methodical approach to problem solving. Strong knowledge of:
- Cyber Threat Intelligence
- Threat actor activity and attack techniques
- Tactics, Techniques and Procedures (TTPs)
- MITRE ATT&CK
- Security monitoring and detection
- Defence-in-depth concepts
- Vulnerability identification and remediation
- Current cyber security developments and industry trends Desirable
- Experience using Anomali or another Threat Intelligence Platform.
- Familiarity with SOAR technologies, particularly Phantom.
- Exposure to Splunk or comparable security monitoring platforms.
- Experience working with automated intelligence feeds.
- Background in security awareness or phishing simulation programmes.
- Understanding of cyber security governance and control environments. Education / Qualifications
- Degree in Cyber Security, Computer Science, Information Technology, or a related discipline, or equivalent practical experience. Personal Requirements
- Clear and confident communicator.
- Naturally curious with a proactive approach to identifying potential risks.
- Comfortable managing several priorities in a fast-moving environment.
- Able to work autonomously while knowing when to involve wider stakeholders.
- Logical, organised, and highly detail-oriented.
- Comfortable handling sensitive or time-critical security information.
- Strong relationship-building skills with both technical and non-technical teams. This will be an initial 6 month contract, converting to a permanent position. Rate: TBC Salary: 75k-85k
Job ref blurredText
Posted on blurredText
Last checked on blurredText
Closing on blurredText
Discuss this job
Share your intel on this vacancy and help others - anonymously. Get notified automatically of new comments when starred or saved to Tracker.
My Private Notes
Saving private notes will automatically star the vacancy to your Jobs page.