Cyber Threat Intelligence Analyst & Threat Hunt Lead

Dwr Cymru Cyf; Cardiff; On-site; GBP 65,000 - 85,000; Full time

Benefits offered by this job

Enhanced employer pension

Cycle to work scheme

Health CashBack scheme

Free on-site parking

Job summary

Dŵr Cymru Cyf is seeking a dedicated Cyber Threat analyst to integrate cyber threat intelligence across security operations and expand threat detection in the OT environment. You will identify external threats to Welsh Water and stakeholders, draft management reports, and support incident response and vulnerability management.

You will work with the Head of Security Operations to mature the CTI framework and collaborate with security engineering to enhance monitoring and response use cases.

Qualifications

• Experience in cyber security operations, incident management or threat intelligence.
• Understanding of Cyber Kill Chain, MITRE ATT&CK and other security frameworks.
• Ability to work with external service providers and internal stakeholders.

Responsibilities

• Monitor threat actors and maintain security threat levels.
• Design and implement custom detection logic and threat hunts.
• Support vulnerability status analysis and remediation prioritisation.
• Provide SME input to technology projects and CTI programme development.
• Produce management reporting on threat intelligence and security operations.

Skills

Intelligence analysis

Stakeholder management

Threat hunting

Threat modelling

Education

GIAC/GCIA/GCIH/GDAT/GCDA/ISP

CompTIA Security+/CySA+

CRTIA/GCTI

Other security qualifications

Tools

STIX/TAXII

YAML

YARA

JSON

Job description

Dŵr Cymru Cyf is seeking a dedicated Cyber Threat analyst to integrate cyber threat intelligence across security operations and expand threat detection in the OT environment. You will identify external threats to Welsh Water and stakeholders, draft management reports, and support incident response and vulnerability management.

You will work with the Head of Security Operations to mature the CTI framework and collaborate with security engineering to enhance monitoring and response use cases.