Advanced Cyber Threat Analyst | AI-Driven Response

M&G; Stirling; Hybrid; GBP 65,000 - 105,000; Full time

Benefits offered by this job

Pension scheme

Share Save & Share Incentive Plan

38 days annual leave

Parental leave policy

Private healthcare & Life assurance

Job summary

M&G is seeking an Advanced Cyber Threat Analyst to join our Security Operations team. You will identify, investigate and respond to cyber threats, strengthening M&G’s defensive capabilities across cloud, endpoint, identity, email and network environments.

You will perform intelligence-led threat hunting, develop detections and validate AI-assisted analyses while coordinating with internal teams and external providers to improve resilience and reduce risk.

Qualifications

• Experience in Security Operations and cyber incident investigation.
• Structured, intelligence-led threat hunting experience.
• Ability to develop, tune or validate security detections and analytical rules.
• Knowledge of threat intelligence and adversary behaviours in investigations.

Responsibilities

• Investigate complex security incidents across cloud, endpoint, identity, email and network.
• Assess business impact and recommend containment and remediation actions.
• Maintain accurate investigation records and evidence throughout incident lifecycle.
• Conduct intelligence-led threat hunts based on adversary campaigns and TTPs.
• Translate findings into improved detections, controls and response processes.
• Collaborate with internal teams and external service providers for effective response.

Skills

Security incident handling

Threat hunting

Azure security (Entra, Defender)

Threat intelligence

Incident response

AI-assisted security analytics

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Microsoft Entra

Defender for Identity

Defender for Cloud

Job description

M&G is seeking an Advanced Cyber Threat Analyst to join our Security Operations team. You will identify, investigate and respond to cyber threats, strengthening M&G’s defensive capabilities across cloud, endpoint, identity, email and network environments.

You will perform intelligence-led threat hunting, develop detections and validate AI-assisted analyses while coordinating with internal teams and external providers to improve resilience and reduce risk.