AI-Driven Cyber Threat Analyst & Hunter

M&G; Stirling; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Pension up to 18%

Share Save / Share Incentive Plan

38 days annual leave + extra days

Job summary

M&G is seeking an Advanced Cyber Threat Analyst to join the Security Operations team in the UK. The role focuses on investigating complex cyber incidents, conducting intelligence-led threat hunts, and improving detections across cloud, endpoint, identity, email and network technologies.

You will collaborate with Threat Intelligence, Security Operations Engineering, and external providers to strengthen defensive capabilities.

Qualifications

• Experience in a Security Operations environment and incident response.
• Structured, intelligence-led threat hunting experience.
• Ability to develop and tune detections and analytics rules.
• Understanding threat intelligence and adversary behaviours in investigations.
• Experience using security data to assess risk and recommend actions.
• Knowledge of Azure security environments (Entra, Defender).

Responsibilities

• Investigate complex security incidents across cloud, endpoint, identity, email and network environments.
• Assess business impact and recommend containment, remediation and recovery actions.
• Maintain investigative records, evidence and decision rationales throughout incidents.
• Conduct intelligence-led threat hunts based on adversary campaigns and techniques.
• Identify attack paths and opportunities to strengthen security posture.
• Translate findings into improved detections, controls and response processes.
• Develop and validate analytical rules to reduce alert fatigue and adapt to evolving threats.
• Collaborate with engineering and external providers to improve telemetry and tooling.
• Use AI-assisted analysis to support triage, investigation and reporting.
• Communicate complex threats clearly to technical and non-technical stakeholders.

Skills

Cyber incident investigation

Threat hunting

Threat intelligence

Detections & analytics

Security governance & audits

AI-assisted security operations

Communication to stakeholders

Adaptability under time pressure

Education

Certifications: CompTIA Security+

Certifications: CySA+

Certifications: ISC2 SSCP

Certifications: SANS

Microsoft certifications (SC-200, AZ-500)

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

Entra / Azure security

Job description

M&G is seeking an Advanced Cyber Threat Analyst to join the Security Operations team in the UK. The role focuses on investigating complex cyber incidents, conducting intelligence-led threat hunts, and improving detections across cloud, endpoint, identity, email and network technologies.

You will collaborate with Threat Intelligence, Security Operations Engineering, and external providers to strengthen defensive capabilities.