Senior Cyber Analyst — Threat Intel & Incident Response

Primary Responsibilities

• Maintain and analyse the Bank's CTI: monitor and analyse intelligence feeds, OSINT[1] and internal telemetry; maintain adversary TTP[2] profiles mapped to the MITRE ATT&CK[3] framework; produce decision-useful intelligence reports and briefings for review by the UK management for submission to senior management and the BRCC.
• Provide support for oversight and assurance of the outsourced 24/7 SOC and managed detection and response service, holding the provider to its SLAs and quality, and coordinate the Bank's cyber workstream during incidents, from detection through containment and eradication to clean-room recovery, producing root-cause analyses and tracking remediation to closure.
• Prove detection effectiveness against AI-speed and malware-free intrusions through a purple-team, threat-hunting and adversary-emulation cadence; do not assert capability that has not been tested.
• Support patch-wave readiness and accelerated vulnerability triage, using the SSVC[4] method, prioritising the internet-facing attack surface.
• Support the human-layer threat response: deepfake-aware and AI-grade phishing awareness, simulation and reporting-culture metrics under UK policy ownership and governance.
• Support the threat-led testing programme (CBEST[5] / STAR-FS[6]) and feed lessons into the SIEM[7], the SOAR[8] and the detection-engineering backlog.
• Coordinate and support clean-room recovery, immutable-backup and patient-zero integrity validation with the Head of Operational Resilience and the CTO[9]; confirm restoration before reintroduction.

Requirements

• Candidates should possess a relevant qualification with 8-10 years experience.

Application Closing Date
14th November, 2026. 

How to Apply
Interested and qualified candidates should send their CV to:  using the Job Title as the subject of the mail.

Share this job: