Advanced Cyber Threat Analyst AI-Driven Incident Response

mgpru; Stirling; Hybrid; GBP 55,000 - 75,000; Full time

Job summary

M&G is seeking an Advanced Cyber Threat Analyst to join its Security Operations team. The role focuses on identifying, investigating and responding to cyber threats while strengthening security capabilities across cloud, endpoint, identity, email and network technologies.

The analyst will perform intelligence-led threat hunting, develop detections and work with internal teams and external providers to improve resilience. Flexible working arrangements are available.

Qualifications

• Experience in a Security Operations environment.
• Proficient in cyber incident investigation and response.
• Experience analysing activity across endpoint, identity, cloud, email or network security technologies.
• Structured, intelligence-led threat hunting experience.
• Ability to develop, tune or validate security detections and analytical rules.

Responsibilities

• Investigate complex security incidents across cloud, endpoint, identity, email and network environments.
• Assess business impact of incidents and recommend containment, remediation and recovery actions.
• Maintain investigative records, evidence and decision rationales throughout the incident lifecycle.
• Conduct intelligence-led threat hunts based on adversary campaigns, TTPs.
• Identify attack paths, security weaknesses, detection gaps and opportunities to strengthen security posture.
• Translate findings into improved detections, controls and response processes.
• Develop, tune and validate analytical rules to stay effective against evolving threats.
• Collaborate with engineering to improve telemetry, data quality and automation.
• Use AI-assisted analysis to support triage, investigation and reporting.
• Validate AI outputs and maintain accountability for conclusions and decisions.
• Serve as escalation point for complex alerts and incidents.

Skills

Security Operations

Incident investigation

Threat hunting

Detections & analytics

Azure security

Tools

Microsoft Sentinel

Defender for Endpoint

Entra

Defender for Cloud

Threat intelligence

Job description

M&G is seeking an Advanced Cyber Threat Analyst to join its Security Operations team. The role focuses on identifying, investigating and responding to cyber threats while strengthening security capabilities across cloud, endpoint, identity, email and network technologies.

The analyst will perform intelligence-led threat hunting, develop detections and work with internal teams and external providers to improve resilience. Flexible working arrangements are available.