Advanced Cyber Threat Analyst

Prudential Distribution Ltd; Scotland; Híbrido; GBP 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Pension up to 18%

Share Save plan

38 days annual leave

Flexible time off

Family policy

Private healthcare

Life assurance

Descripción de la vacante

Prudential Distribution Ltd is seeking an Advanced Cyber Threat Analyst to identify, investigate and respond to cyber threats while strengthening defensive capabilities across cloud, end‑point, identity, email and network areas.

You will collaborate with Threat Intelligence and Security Operations teams to improve resilience, reduce risk and translate findings into lasting security improvements. Strong incident investigation, threat hunting and detection engineering skills are essential.

Formación

• Experience in a Security Operations environment.
• Proficient in incident investigation and response.
• Experience analysing activity across security tech (endpoint, cloud, identity, email, network).
• Structured, intelligence-led threat hunting experience.
• Ability to develop or validate detections and analytic rules.
• Knowledge of threat intelligence and adversary behaviours.
• Experience with security data to assess risk and inform actions.
• Familiarity with Microsoft Azure security features (Entra, Defender).
• Sound judgement with incomplete or time-sensitive data.
• Strong governance, audit and documentation discipline.
• Experience with AI-assisted security operations and human oversight.

Responsabilidades

• Investigate complex security incidents across cloud, endpoint, identity, email and network.
• Assess business impact and recommend containment and recovery actions.
• Maintain investigative records and decision rationales.
• Conduct intelligence-led threat hunts based on adversary campaigns.
• Identify attack paths and improve detection coverage and controls.
• Translate findings into improved detections and response processes.
• Develop, tune and validate analytical rules for evolving threats.
• Collaborate with Security Operations Engineering on telemetry and tooling.
• Use AI-assisted analysis to support triage, investigation and reporting.
• Escalate as a technical expert for complex alerts and incidents.
• Communicate threats and decisions clearly to technical and non-technical stakeholders.
• Coordinate with internal teams and external security providers for investigation and response.
• Deliver practical improvements to SOC processes and capabilities.
• Maintain audit evidence and documentation for internal/external reviews.

Conocimientos

Security operations experience

Incident investigation

Threat hunting

Detections development

AI-assisted analysis

Analytical rule tuning

Telemetry and data quality

Cross-functional communication

Threat intelligence understanding

Azure security environments

Microsoft Defender ecosystem

Endpoint Detection and Response

Educación

CompTIA Security+, CySA+, ISC2 SSCP or SANS certifications

Microsoft SC-200 or AZ-500

Herramientas

Microsoft Sentinel

Azure Entra

Defender for Endpoint

Defender for Cloud

Descripción del empleo

Advanced Cyber Threat Analyst

The Role

The Advanced Cyber Threat Analyst is a technical specialist within Security Operations. The role identifies, investigates and responds to cyber threats while continuously strengthening M&G’s defensive capabilities. The role combines advanced incident investigation, intelligence-led threat hunting, detection engineering and AI-assisted analysis. The analyst uses evidence and professional judgement to assess threat, coordinate and action proportionate response and translate investigative findings into lasting security improvements.

Working across cloud, endpoint, identity, email and network technologies, the role collaborates closely with Threat Intelligence, Security Operations Engineering, internal stakeholders and external security service providers to improve resilience and reduce cyber risk.

Main Responsibilities

• Investigate complex security incidents across cloud, endpoint, identity, email and network environments.
• Assess the potential business impact of incidents and recommend proportionate containment, remediation and recovery actions.
• Maintain accurate investigative records, evidence and decision rationales throughout the incident lifecycle.
• Conduct intelligence-led threat hunts based on adversary campaigns, behaviours, tactics, techniques and procedures.
• Identify attack paths, security weaknesses, detection gaps and opportunities to strengthen M&G’s security posture.
• Translate investigation, threat hunting and threat intelligence findings into improved detections, controls and response processes.
• Develop, tune and validate analytical rules to ensure they remain effective against evolving threats and reduce unnecessary alert activity.
• Work with Security Operations Engineering to improve telemetry, data quality, detection coverage, tooling integrations and automated workflows.
• Use AI-assisted analysis and advanced analytics to support triage, investigation, threat hunting, detection engineering and reporting.
• Validate AI-generated outputs and retain accountability for analytical conclusions, response decisions and security recommendations.
• Act as a technical escalation point for complex alerts and incidents requiring advanced investigation or specialist expertise.
• Communicate complex threats, risks, decisions and recommendations clearly to both technical and non-technical stakeholders.
• Collaborate with internal teams and external security service providers to coordinate effective investigation and response activity.
• Identify and deliver practical improvements to Security Operations processes, procedures and defensive capabilities.
• Maintain effective controls, documentation and audit evidence, supporting internal and external audit activity where required.

Key Knowledge, Skills and Experience

• Practical experience working within a Security Operations environment.
• Strong capability in cyber incident investigation and response.
• Experience analysing activity across endpoint, identity, cloud, email or network security technologies.
• Experience conducting structured, intelligence-led threat hunting.
• Ability to develop, tune or validate security detections and analytical rules.
• Understanding of how threat intelligence and adversary behaviours can inform investigations, threat hunts and detection improvements.
• Experience using security data and evidence to assess risk and recommend proportionate actions.
• Knowledge of Microsoft Azure security environments, including Entra and Microsoft Defender capabilities.
• Sound judgement when operating with incomplete, conflicting or time-sensitive information.
• Strong documentation, governance and audit discipline.
• Knowledge of responsible AI-assisted security operations, including the need for human oversight and validation.
• Experience with Microsoft Sentinel, including log analysis, analytical rule management and playbook development.
• Experience with Endpoint Detection and Response technologies, including Microsoft Defender for Endpoint.
• Experience with Microsoft security technologies such as Entra, Defender for Identity and Defender for Cloud.
• Experience developing investigation, enrichment or response automation.
• Experience working in financial services or another highly regulated environment.
• Relevant industry certifications such as CompTIA Security+, CySA+, ISC2 SSCP or equivalent SANS certifications.
• Relevant Microsoft certifications such as SC-200 or AZ-500.

What we offer

• A valuable pension scheme of up to 18% (13% made up of employer contributions and 5% employee contributions).
• Access to our Share Save and Share Incentive Plan, alongside financial wellbeing and support services to help give you real confidence to put your money to work.
• Enjoy 38 days annual leave (including bank holidays), with the opportunity to purchase up to five extra days.
• Our Time Off When You Need It policy gives you the flexibility - to balance work and personal commitments.
• Our market-leading Inspiring Families policy includes comprehensive support and paid parental leave covering maternity, adoption, surrogacy, and paternity leave - because supporting families is an important part of our inclusive culture.
• Health & Protection cover includes Private Healthcare, Critical Illness cover and Life Assurance for you, with additional family options - for peace of mind.

To explore more about life at M&G and our full benefits offering, visit Life at M&G

M&G we strive to have a diverse workforce and an inclusive culture, underpinned by our policies and employee-led networks that offer networking, support and development opportunities for the diverse communities our colleagues represent. We welcome applications from people of all backgrounds – across gender, ethnicity, age, disability, sexual orientation and more – including neurodivergent individuals, career returners and those with military service experience. M&G is proud to be Level3: Disability Confident Leader under the UK Government Disability Confident employer scheme, and we welcome applications from candidates with disabilities and long‑term health conditions. If you would like to participate in the initiative, you will have the opportunity to indicate this on your application. We are committed to providing an inclusive recruitment process. All candidates have the opportunity to request reasonable adjustments when applying. If you need any additional support at any stage, please contact us at: [e-mail]

M&G is a leading international savings and investments business, managing money for around 4.6 million individual clients and more than 900 institutional clients in 38 offices worldwide. As at 31 December2024, we had £345.9billion of assets under management and administration. Our purpose is to give everyone real confidence to put your money to work. With a heritage dating back more than 175years, we have a long history of innovation in savings and investments, combining asset management and insurance expertise to offer a wide range of solutions. Our two distinct operating segments, Asset Management and Life, work together to provide access to balanced, long‑term investment and savings solutions.